TP-Link T2500G-10TSTL-SG3210 T2500G-10TSUN V1 CLI Reference Guide - Page 343

35.12 aaa authentication enable Description This aaa authentication enable command is used to configure a privilege authentication method list. A method list describes the authentication methods and their sequence to elevate a user's privilege. To delete the specified authentication method list, please use the no aaa authentication enable command. Syntax aaa authentication enable { method-list } { method1 } [ method2 ] [ method3 ] [ method4 ] no aaa authentication enable method-list Parameter method-list -- Specify the method list name. method1, method2, method3, method4 -- Specify the authentication methods in order. The next authentication method is tried only if the previous method does not respond, not if it fails. The preset methods include radius, tacacs, local and none. "radius" means the RADIUS server group "radius"; "tacacs" means the RACACS+ server group "tacacs"; "local" means local username database are used; "none" means no authentication is used for privilege elevation. Users can aslo define new method with the aaa group command. Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. User Guidelines By default the enable authentication method is "default" with "none" as method1. Example Configure a privilege authentication method list "list2" with the priority1 method as radius and priority2 method as local: T2500G-10TS(config)# aaa authenticaiton enable list2 radius local 327