222 AAA CommandsDefault ConfigurationThe default enable list is enableList. It is used by console, telnet, and SSHand only contains the methodnone.Command ModeGlobal Configuration modeUser GuidelinesThe default and optional list names created with the aaa authenticationenable command are used with the enable authentication command.Create a list by entering the aaa authentication enablelist-name methodcommand wherelist-name is any character string used to name this list. Themethod argument identifies the list of methods that the authenticationalgorithm tries in the given sequence.The additional methods of authentication are used only if the previousmethod returns an error, not if it fails to authenticate the user. Only theRADIUS or TACACS methods can return an error. To ensure that theauthentication succeeds even if all methods return an error, specify none asthe final method in the command line. Note that enable will not succeed fora level one user if no authentication method is defined. A level one user mustauthenticate to get to privileged EXEC mode. For example, if none isspecified as an authentication method after radius, no authentication is usedif the RADIUS server is down.NOTE: Requests sent by the switch to a RADIUS server include the username"$enabx$", where x is the requested privilege level. For enable to be authenticatedon Radius servers, add "$enabx$" users to them. The login user ID is also sent toTACACS+ servers for enable authentication.ExampleThe following example sets authentication when accessing higher privilegelevels.console(config)# aaa authentication enable default enable
