User Manual User guide

216 Rockwell Automation Publication 1783-UM006A-EN-P - May 2014
Chapter 6 Administering the WAP Access
Beginning in privileged EXEC mode, follow these steps to configure login
authentication. This procedure is required.
1. Enter global configuration mode.
configure terminal
2. Enable AAA.
aaa new-model
3. Create a login authentication method list.
aaa authentication login {default | list-name}
method1 [method2...]
• To create a default list that is used when a named list is not specified in the
login authentication command, use the default keyword
followed by the methods that are to be used in default situations. The
default method list is automatically applied to all interfaces.
• For
list-name, specify a character string to name the list you are
creating.
• For
method1..., specify the actual method the authentication algorithm
tries. The additional methods of authentication are used only if the
previous method returns an error, not if it fails.
Choose one of these methods:
• local
Use the local username database for authentication. You must enter
username information into the database. Use the
username password
global configuration command.
•
tacacs+
Use TACACS+ authentication. You must configure the TACACS+
server before you can use this authentication method.
4. Enter line configuration mode and apply the authentication list.
line [console | tty | vty] line-number [ending-
line-number]
5. Apply the authentication list to a line or set of lines.
• If you specify
default, use the default list created with the aaa
authentication login command.
• For list-name, specify the list created with the
aaa
authentication login
command.
login authentication {default | list-name}
6. Return to privileged EXEC mode.
end