•
- use the server(s) configured with the
tacacs-server host
command.
... method4
(OPTIONAL) Enter up to four additional methods. In the event of a “no
response” from the first method, FTOS applies the next configured
method (up to four configured methods).
Defaults
Not configured (that is, no authentication is performed).
Command Modes
CONFIGURATION
Command History
Version 8.3.11.1
Introduced on the Z9000.
Version 8.3.7.0
Introduced on the S4810.
Version 7.6.1.0
Introduced on the S-Series.
Version 7.5.1.0
Introduced on the C-Series.
pre-Version
6.2.1.0
Introduced on the E-Series.
Usage
Information
By default, the locally configured username password is used. If you configure
aaa
authentication login default
, FTOS uses the methods defined by this command
for login instead.
Methods configured with the
aaa authentication login
command are evaluated in
the order they are configured. If users encounter an error with the first method listed, FTOS
applies the next method configured. If users fail the first method listed, no other methods are
applied. The only exception is the local method. If the user’s name is not listed in the local
database, the next method is applied. If the correct user name/password combination are not
entered, the user is not allowed access to the switch.
NOTE: If authentication fails using the primary method, FTOS employs the second method
(or third method, if necessary) automatically. For example, if the server is
reachable, but the server key is invalid, FTOS proceeds to the next authentication method.
The is incorrect, but the user is still authenticated by the secondary method.
After configuring the
aaa authentication login
command, configure the
login
authentication
command to enable the authentication scheme on terminal lines.
Connections to the SSH server work with the following login mechanisms: local, radius, and
tacacs.
Related
Commands
login authentication
– enables AAA login authentication on the terminal lines.
password
– creates a password.
radius-server host
– specifies a RADIUS server host.
tacacs-server host
– specifies a server host.
1295
Summary of Contents for Force10 Z9000
Page 1: ...FTOS Command Line Reference Guide for the Z9000 System FTOS 9 1 0 0 ...
Page 96: ...96 ...
Page 194: ...194 ...
Page 312: ...312 ...
Page 540: ...540 ...
Page 546: ...546 ...
Page 560: ...560 ...
Page 566: ...566 ...
Page 590: ...action act UpdateCounter param0 1 0x01 param1 0 0x00 output truncated 590 ...
Page 624: ...624 ...
Page 638: ...638 ...
Page 648: ...648 ...
Page 659: ...Related Commands show gvrp displays the GVRP configuration 659 ...
Page 660: ...660 ...
Page 834: ...834 ...
Page 854: ...854 ...
Page 906: ...906 ...
Page 914: ...914 ...
Page 976: ...976 ...
Page 990: ...990 ...
Page 1006: ...1006 ...
Page 1008: ...1008 ...
Page 1026: ...1026 ...
Page 1145: ...10 211 1 2 Outgoing interface list GigabitEthernet 8 0 1145 ...
Page 1146: ...1146 ...
Page 1156: ...1156 ...
Page 1166: ...1166 ...
Page 1180: ...1180 ...
Page 1258: ...1258 ...
Page 1272: ...1272 ...
Page 1394: ...1394 ...
Page 1400: ...1400 ...
Page 1410: ...1410 ...
Page 1424: ...1424 ...
Page 1444: ...1444 ...
Page 1468: ...Version 8 3 8 0 Introduced on the S4810 1468 ...
Page 1470: ...1470 ...