Dell Force10 S4820T S4820T Configuration Guide - Page 822

www.dell.com | support.dell.com Enable AAA Authentication To enable AAA authentication, use the following command in the CONFIGURATION mode: Command Syntax aaa authentication enable {method-list-name | default} method1 [... method4] Command Mode CONFIGURATION Purpose • default-Uses the listed authentication methods that follow this argument as the default list of methods when a user logs in. • method-list-name-Character string used to name the list of enable authentication methods activated when a user logs in. • method1 [... method4]-Any of the following: RADIUS, TACACS, enable, line, none. If the default list is not set, only the local enable is checked. This has the same effect as issuing: aaa authentication enable default enable AAA Authentication-RADIUS To enable authentication from the RADIUS server, and use TACACS as a backup, use the following commands: Step Command Syntax 1 aaa authentication enable default radius tacacs 2 radius-server host x.x.x.x key some-password 3 tacacs-server host x.x.x.x key some-password Command Mode Purpose CONFIGURATION CONFIGURATION To enable RADIUS and to set up TACACS as backup. To establish host address and password. CONFIGURATION To establish host address and password. To get enable authentication from the RADIUS server, and use TACACS as a backup, issue the following commands: FTOS(config)# aaa authentication enable default radius tacacs Radius and TACACS server has to be properly setup for this. FTOS(config)# radius-server host x.x.x.x key FTOS(config)# tacacs-server host x.x.x.x key To use local authentication for enable secret on console, while using remote authentication on VTY lines, perform the following steps: FTOS(config)# aaa authentication enable mymethodlist radius tacacs FTOS(config)# line vty 0 9 FTOS(config-line-vty)# enable authentication mymethodlist 822 | Security