aaa authentication login
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
aaa authentication login
To configure the authentication method for a login, use the aaa authentication login command in
configuration mode. To revert to local authentication, use the no form of the command.
Syntax Description
default
console
group group-name
local
none
error-enable
mschap enable
Defaults
Local user name authentication.
Command Modes
Configuration mode.
Command History
Release
1.3(1)
3.0(1)
Usage Guidelines
Use the console option to override the console login method.
Specify the currently configured command preceded by a no to revert to the factory default.
Examples
The following example enables all login authentication to be performed using remote TACACS+ servers,
which are members of the group called TacServer, followed by the local login method.
switch# config t
switch(config)# aaa authentication login default group TacServer
The following example enables console authentication to use the group called TacServer, followed by
the local login method.
switch(config)# aaa authentication login console group TacServer
Cisco MDS 9000 Family Command Reference
2-6
aaa authentication login {default {group group-name [none] | none} | local [none] | none} |
console {group-name [none] | none} | local [none] | none}| error-enable | mschap enable}
no aaa authentication login {default {group group-name [none] | none} | local [none] | none} |
console {group-name [none] | none} | local [none] | none}| error-enable | mschap enable}
Configures the default method.
Configures the console authentication login method.
Specifies the group name. The group name is a maximum of 127 characters.
Specifies the local authentication method.
Sets no authentication; everyone is permitted.
Enables login error message display.
Enables MS-CHAP authentication for login.
Modification
This command was introduced.
Added the mschap option.
Chapter 2
A Commands
OL-8413-07, Cisco MDS SAN-OS Release 3.x