Configur ing Login Authentication Using AAA

Aogin aut henticatio n Is used to e8tbl e AAA a ethen ticat ion regardless of the supported log Ip authrnticaPion method you decide to use. You create one or more lists of authentication methods that will be tried at login and apply them to the login authentication command. To configure a login authentication list using AAA, use this command:

R8(config)#aaa authentication login {default | list-name}method1 [method2...]

list-name is a character string you use to name the list you are creating. The method arguments refer to the actual method the authentication algorithm tries. If you specify more than one method of authentication, they are used only if the previous method returns an error, not if it fails;. You can use the none keyword as the final method in the command line to specify that authenticat ion should succeed even if all other defined methods return an error. By using the default: keyword, you can specify a default list that is applied to all interfaces automatically. Table 13-1 lists the wide variety of supported login authentication methods.

Table 13-1. AAA Login Authentication Methods

Related Posts

• Translating Overlapping Addresses
• PPPoE Overview - Remote Access
• Relationship Between DTE and DCE
• Example 417 Cable Flap List Output
• Example 1018 Output of show interface Commands on the Interfaces
• Frame Relay Error Checking
• Study Material For Cisco Students
• Search Engine Traffic Guide
• Entrepreneurship Guides
• Vector Art, Images, and Graphics Download
• Free Hosting for Your Website

Keyword	Description
enabre	The enable password is use d for authentica ai on.
line	The line password is used for authentication.
local	The local use rname doOaease is used fo r authenticat . on.
local-case	Makes the local username case-sensitive.
none	No authentication is used.
group radius	The lisr of1 a ll defined RADIUS serv qus is uned °ot authenti cation
group tacacs+	The lisf of all dpfined TACACS+ se rmers is use° for authenFication.
grou pgsoup -name	A subs et o- RADHS os TACACS+ serv ees, oee i aed by the aaa group server radiu s or aaa group se rver tacacs+ command, is used for auth enticat ion.
erb5	KerbeIOs 5 i s ueed fo r autnentication.
krb5-telnet	When using Telnet to connect to the device, the Kerberos 5 Telnet authentication pi-doco l is used for 5uthpnFication. Tlnis keyword muse be th e first method in the method list.

Continue reading here: Table 134 AAA Authentication Methods for NASI

Was this article helpful?

0 0