Filter
Top Products
Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software
aaa authentication
SR-6
Cisco IOS XR System Security Command Reference
aaa authentication
To create a method list for authentication, use the aaa authentication command in global configuration
mode. To disable this authentication method, use the no form of this command.
aaa authentication {login | ppp} {default | list-name | remote} method-list
no aaa authentication {login | ppp} {default | list-name | remote} method-list
Syntax Description
Defaults Default behavior applies the local authentication on all ports.
Command Modes Global configuration
login Sets authentication for login.
ppp Sets authentication for Point-to-Point Protocol.
default Uses the listed authentication methods that follow this keyword as the
default list of methods for authentication.
list-name Character string used to name the authentication method list.
remote Uses the listed authentication methods that follow this keyword as the
default list of methods for administrative authentication on a remote
nonowner secure domain router. The remote keyword is used only with the
login keyword and not with the ppp keyword.
Note The remote keyword is available only on the admin plane.
method-list Method used to enable AAA system accounting. The value is one of the
following options:
• group tacacs+—Specifies a method list that uses the list of all
configured TACACS+ servers for authentication.
• group radius—Specifies a method list that uses the list of all configured
RADIUS servers for authentication.
• group named-group—Specifies a method list that uses a named subset
of TACACS+ or RADIUS servers for authentication as defined by the
aaa group server tacacs+ or aaa group server radius command.
• local—Specifies a method list that uses the local username database
method for authentication. Rollover cannot happen beyond the local
method.
• line—Specifies a method list that uses the line password for
authentication.