Netgear XSM4324FS CLI Manual Software Version 12.x - Page 97

M4300 Intelligent Edge Series Fully Managed Stackable Switches The user will only be prompted for an enable password if one is required. The following authentication methods do not require passwords: • none • deny • enable (if no enable password is configured) • line (if no line password is configured) See the examples below. 1. aaa authentication enable default enable none 2. aaa authentication enable default line none 3. aaa authentication enable default enable radius none 4. aaa authentication enable default line tacacs none Examples 1 and 2 do not prompt for a password, however because examples 3 and 4 contain the radius and tacacs methods, the password prompt is displayed. If the login methods include only enable, and there is no enable password configured, the switch does not prompt for a user name. In such cases, the switch prompts only for a password. The switch supports configuring methods after the local method in authentication and authorization lists. If the user is not present in the local database, then the next configured method is tried. The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line. Use the command show authorization methods on page 102 to display information about the authentication methods. Note: Requests sent by the switch to a RADIUS or TACACS server include the username $enabx$, in which x is the requested privilege level. The login user ID is also sent to a TACACS+ server. Default Format Mode Parameter default default aaa authentication enable {default | list-name} method1 [method2...] Global Config Description Uses the listed authentication methods that follow this argument as the default list of methods, when using higher privilege levels. Management Commands 97 CLI Command Reference Manual