This table shows the AAA authentication methods that you can configure for the AAA services.
Table 3: AAA Authentication Methods for AAA Services
AAA Methods
AAA Service
Server groups, local, and none
Console login authentication
Server groups, local, and none
User login authentication
Server groups and local
User management session accounting
For console login authentication, user login authentication, and user management session accounting, the
Cisco NX-OS device tries each option in the order specified. The local option is the default method when
other configured options fail. You can disable the local option for the console or default login by using the
no aaa authentication login
{
console
|
default
}
fallback error local
command.
Note
Authentication and Authorization Process for User Login
Figure 1: Authorization and Authentication Flow for User Login
This figure shows a flow chart of the authentication and authorization process for user login.
The following list explains the process:
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
12
Configuring AAA
Authentication and Authorization Process for User Login