Purpose
Command or Action
Disables ASCII authentication.
no aaa authentication login ascii-authentication
Example:
Step 2
switch(config)#
no aaa authentication login
ascii-authentication
Enables MSCHAP or MSCHAP V2 authentication. The
default is disabled.
aaa authentication login
{
mschap
|
mschapv2
}
enable
Example:
Step 3
You cannot enable both MSCHAP and
MSCHAP V2 on your Cisco NX-OS device.
Note
switch(config)#
aaa authentication login mschap
enable
Exits configuration mode.
exit
Example:
Step 4
switch(config)#
exit
switch#
Displays the MSCHAP or MSCHAP V2 configuration.
(Optional)
show aaa authentication login
{
mschap
|
mschapv2
}
Step 5
Example:
switch#
show aaa authentication login mschap
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 6
switch#
copy running-config startup-config
Configuring AAA Accounting Default Methods
Cisco NX-OS software supports and RADIUS methods for accounting. Cisco NX-OS devices
report user activity to or RADIUS security servers in the form of accounting records. Each
accounting record contains accounting attribute-value (AV) pairs and is stored on the AAA server.
When you activate AAA accounting, the Cisco NX-OS device reports these attributes as accounting records,
which are then stored in an accounting log on the security server.
You can create default method lists defining specific accounting methods, which include the following:
RADIUS server group
Uses the global pool of RADIUS servers for accounting.
Specified server group
Uses a specified RADIUS or server group for accounting.
Local
Uses the local username or password database for accounting.
If you have configured server groups and the server groups do not respond, by default, the local database is
used for authentication.
Note
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
26
Configuring AAA
Configuring AAA Accounting Default Methods
