FTOS Configuration Guide for the C-Series - Force10 Networks

Enabling AAA Authentication
To enable AAA authentication, use the following command in the CONFIGURATION mode:
Command Syntax Command Mode Purpose
aaa authentication enable
{method-list-name | default} method1 [...
method4]
If the default list is not set, only the local enable is checked. This has the same effect as issuing: aaa
authentication enable default enable
AAA Authentication—RADIUS
CONFIGURATION • default—Uses the listed authentication
methods that follow this argument as the
default list of methods when a user logs
in.
• method-list-name—Character string
used to name the list of enable
authentication methods activated when
a user logs in.
• method1 [... method4]—Any of the
following: RADIUS, TACACS, enable,
line, none.
To enable authentication from the RADIUS server, and use TACACS as a backup, use the following
commands:
Step Command Syntax Command Mode Purpose
1 aaa authentication enable default
radius tacacs
2
3
radius-server host x.x.x.x key
some-password
tacacs-server host x.x.x.x key
some-password
CONFIGURATION To enable RADIUS and to set up
TACACS as backup.
CONFIGURATION To establish host address and password.
To get enable authentication from the RADIUS server, and use TACACS as a backup, issue the following
commands:
Force10(config)# aaa authentication enable default radius tacacs
Radius and TACACS server has to be properly setup for this.
Force10(config)# radius-server host x.x.x.x key
Force10(config)# tacacs-server host x.x.x.x key
CONFIGURATION To establish host address and password.
138 Security