Defining The Login Authentication Method - Cisco 4700M Configuration Manual

Defining the Login Authentication Method

Defining the Login Authentication Method
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
2-46
Authentication is the process of verifying the identity of the person attempting to
log in to the ACE CLI by console port or by a Telnet or SSH session. This identity
verification is based on the username and password combination provided by the
person attempting to access the ACE.
The ACE supports local authentication using the lookup database on the ACE or
remote authentication using one or more TACACS+, RADIUS, or LDAP servers.
You can specify the local database on the ACE as the fallback authentication
method in case the configured AAA servers fail to respond to the authentication
request.
The default login method of user authentication is by console port or by a Telnet
or SSH session. You can override the default login authentication method and
specify authentication through only the console port.
To configure the authentication method used for login to the ACE CLI, use the aaa
authentication login command in configuration mode.
The syntax of this command is as follows:
aaa authentication login {{console | default} {{group group_name}
{local} {none}}} | error-enable
The arguments, keywords, and options are as follows:
console—Specifies the console port login authentication method, identified
•
by the specified server group.
• default—Specifies the default login authentication method (console port or
by a Telnet or SSH session), identified by the specified server group.
• group group_name—Associates the login authentication process with a
TACACS+, RADIUS, or LDAP server defined through the aaa group server
command. The server group name is a maximum of 64 alphanumeric
characters with no spaces.
local—Specifies to use the local database on the ACE as the login
•
authentication method. If the server does not respond, then the local database
is used as the fallback authentication method.
Chapter 2 Configuring Authentication and Accounting Services
OL-16202-01