58 AAA Commandsw w w . d e l l . c o m | s u p p o r t . d e l l . c o m Create a list by entering the aaa authentication login list-name method command for aparticular protocol, where list-name is any character string used to name this list. The methodargument identifies the list of methods that the authentication algorithm tries, in the givensequence.The additional methods of authentication are used only if the previous method returns anerror, not if it fails. To ensure that the authentication succeeds even if all methods return anerror, specify none as the final method in the command line. Spaces cannot be used in thestring which defines the list-name.NOTE: Make sure that the given sequence of authentication methods is sensible. For example, asequence where Radius follows None is not sensible because None requires no authentication and,therefore, the process will never require Radius authentication.ExampleThe following example configures authentication login.aaa authentication enableThe aaa authentication enable global configuration command defines authentication method listsfor accessing higher privilege levels. To return to the default configuration use the no form of thiscommand.Syntaxaaa authentication enable {default | list-name} method1 [method2...]no aaa authentication enable default• default—Uses the listed authentication methods that follow this argument as the defaultlist of methods, when using higher privilege levels.• list-name—Character string used to name the list of authentication methods activated,when using access higher privilege levels.• method1 [method2...]—Specify at least one from the following table:Console (config)# aaa authentication login default radius localenable noneKeyword Source or destinationenable Uses the enable password for authentication.line Uses the line password for authentication.none Uses no authentication.tacacs Uses the list of all TACACS+ servers for authentication.
