Cisco 220 Series Smart Plus Reference Manual page 53

AAA Commands
aaa authentication enable
Cisco 220 Series Smart Plus Switches Command Line Interface Reference Guide Release 1.0.0.x
Command Mode
Global Configuration mode
User Guidelines
A user who logs on with a lower privilege level must pass these authentication
methods to access a higher level.
The additional authentication methods are used only if the previous method
returns an error, not if it fails. Specify none as the final method in the command line
to ensure that the authentication succeeds, even if all methods return an error.
Select one or more methods from the following list:
Keyword
enable
none
radius
tacacs+
Create a list by entering the aaa authentication enable
LISTNAME
where is any character string used to name this list. The method
argument identifies the list of methods that the authentication algorithm tries in the
given sequence.
All aaa authentication enable default requests sent by the switch to a RADIUS or a
TACACS+ server include the username $enabx$., where x is the requested
privilege level.
The no aaa authentication enable
has not been referenced.
Example
The following example sets the enable password for authentication for accessing
higher privilege levels:
switchxxxxxx(config)# aaa authentication enable enable-list radius none
switchxxxxxx(config)# line console
switchxxxxxx(config-line)# enable authentication enable-list
Description
Uses the enable password for authentication.
Uses no authentication.
Uses a list of RADIUS servers for authentication.
Uses a list of TACACS servers for authentication.
LISTNAME
command deletes the list name if it
3
LISTNAME
command
51