aaa authentication login default

Description

Use the aaa authentication login default command to configure the order in which authentication methods are tried. Authentication is the process of validating that the end user, or device, is who they claim to be. Generally, authentication precedes authorization.

Use the no form of this command to clear all authentication login settings.

Syntax

aaa authentication login default {<method> | <method> <method> | <method> <method> <method>}

no aaa authentication login

Arguments

<method>

Specifies the methods for authenticating the default login in the order that they will be used. The method options are: • local • radius • tacacs+

 

Defaults

No default behavior or values.

Command Mode

Global Configuration Mode

See Also

See the following related commands:

n	“aaa authorization map”

n	“show aaa”

Usage Guidelines

You can use up to three methods (or databases) for authentication, place the methods in any order, and/or use any method more than once.

However, one of the methods that you include must be local.

Examples

To set the authentication login methods to be local and TACACS+, in that order:

(config) # aaa authentication login default local tacacs+

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.