HP 7000 dl Router manual None, Line, Groupname, Config#aaa authentication enable default line

SROS Command Line Interface Reference Guide Global Configuration Mode Command Set

aaa authentication enable default [none line enable groupname]

Use the aaa authentication enable default command to create (or change) the list of methods used for privileged mode access authentication. For more detailed information on AAA functionality, refer to the Technology Review section of the command aaa on on page 206.

Syntax Description

none	Access automatically granted.
line	Use the line password.
enable	Use the enable password.
groupname	Use the group of remote servers. The group name radius uses all defined
	RADIUS servers.

Default Values

If there is no default list configured, the default behavior is to use the enable password for the unit. If there is no password configured, consoles are allowed in (prevents a lock-out).

Command Modes

(config)# Global Configuration Mode

Functional Notes

A user is authenticated by trying the list of methods from first to last until a method succeeds or fails. If a method is unable to complete, the next method is tried. The group falls through if the servers in the remote group could not be found.

Note that enable access is a password-only process. The local user database cannot be used and the username given to any remote RADIUS server is $enab15$. The only list name allowed is default.

Usage Examples

(config)#aaa authentication enable default line

5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 203