Cisco Systems XR manual Aaa authentication, SR-6

Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software

aaa authentication

aaa authentication

To create a method list for authentication, use the aaa authentication command in global configuration mode. To disable this authentication method, use the no form of this command.

aaa authentication {login ppp} {default list-nameremote} method-list

no aaa authentication {login ppp} {default list-nameremote} method-list

Syntax Description	login	Sets authentication for login.
	ppp	Sets authentication for Point-to-Point Protocol.
	default	Uses the listed authentication methods that follow this keyword as the
		default list of methods for authentication.
	list-name	Character string used to name the authentication method list.
	remote	Uses the listed authentication methods that follow this keyword as the
		default list of methods for administrative authentication on a remote
		nonowner secure domain router. The remote keyword is used only with the
		login keyword and not with the ppp keyword.
		Note The remote keyword is available only on the admin plane.
	method-list	Method used to enable AAA system accounting. The value is one of the
		following options:
		• group tacacs+—Specifies a method list that uses the list of all
		configured TACACS+ servers for authentication.
		• group radius—Specifies a method list that uses the list of all configured
		RADIUS servers for authentication.
		• group named-group—Specifies a method list that uses a named subset
		of TACACS+ or RADIUS servers for authentication as defined by the
		aaa group server tacacs+ or aaa group server radius command.
		• local—Specifies a method list that uses the local username database
		method for authentication. Rollover cannot happen beyond the local
		method.
		• line—Specifies a method list that uses the line password for
		authentication.
Defaults	Default behavior applies the local authentication on all ports.
Command Modes	Global configuration

Cisco IOS XR System Security Command Reference

SR-6