Cisco Small Business 300 1.1 Series, Руководство администратора

Страница: 188 / 706

Authentication, Authorization and Accounting (AAA) Commands
78-20269-01 Command Line Interface Reference Guide 189
15
Default Configuration
The local user database is the default authentication method. This is the same as
entering the command aaa authentication login local.
NOTE
If an authentication method is not defined, console users can log in without any
authentication verification.
Command Mode
Global Configuration mode
User Guidelines
Create a list of authentication methods by entering the aaa authentication login
list-name method1 [method2...] , where list-name is any character string used to
name this list. The method arguments identifies the list of methods that the
authentication algorithm tries, in the given sequence.
The default and list names created with this command are used with aaa
authentication login and aaa authentication enable .
The additional methods of authentication are used only if the previous method
returns an error, not if it fails. Specify none as the final method in the command line
to ensure that the authentication succeeds even if all methods return an error.
no aaa authentication login
list-name
deletes list-name if it has not been
referenced.
Example
The following example sets the authentication login methods for the console.
console (config)# aaa authentication login authen-list radius local none
console (config)#
line console
console (config-line)#
login authentication authen-list
15.2 aaa authentication enable
The aaa authentication enable Global Configuration mode command sets an
authentication method for accessing higher privilege levels. A user, who logons
with a lower privilege level, must enter this password to access a higher level.
To restore the default authentication method, use the no form of this command.