Security | 919Enable AAA AuthenticationTo enable AAA authentication, use the following command in the CONFIGURATION mode:If the default list is not set, only the local enable is checked. This has the same effect as issuing:aaa authentication enable default enableAAA Authentication—RADIUSTo enable authentication from the RADIUS server, and use TACACS as a backup, use the followingcommands:To get enable authentication from the RADIUS server, and use TACACS asa backup, issue the following commands:To use local authentication for enable secret on console, while usingremote authentication on VTY lines, perform the following steps:Command Syntax Command Mode Purposeaaa authentication enable{method-list-name | default} method1 [...method4]CONFIGURATION • default—Uses the listed authenticationmethods that follow this argument as thedefault list of methods when a user logs in.• method-list-name—Character string used toname the list of enable authentication methodsactivated when a user logs in.• method1 [... method4]—Any of the following:RADIUS, TACACS, enable, line, none.Step Command Syntax Command Mode Purpose1 aaa authentication enable defaultradius tacacsCONFIGURATION To enable RADIUS and to set up TACACSas backup.2 radius-server host x.x.x.x keysome-passwordCONFIGURATION To establish host address and password.3 tacacs-server host x.x.x.x keysome-passwordCONFIGURATION To establish host address and password.FTOS(config)# aaa authentication enable default radius tacacsRadius and TACACS server has to be properly setup for this.FTOS(config)# radius-server host x.x.x.x key FTOS(config)# tacacs-server host x.x.x.x key FTOS(config)# aaa authentication enable mymethodlist radius tacacsFTOS(config)# line vty 0 9FTOS(config-line-vty)# enable authentication mymethodlist
