topic Re: aaa authentication enable command in Network Access Control

aaa authentication enable command

krishnas — Sun, 10 Mar 2019 21:15:24 GMT

Hi,

If I configure following command, how can I enter enable user name and password to get into enable prompt? Can someone explain to me how to enable tacacs autherntication for enable access?

"aaa authentication enable default group tacacs+ enable",

TIA

krishna

Re: aaa authentication enable command

owillins — Thu, 11 Aug 2005 19:06:09 GMT

Here is a document on enabling TACACS+ Authentication.

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/rel_4_5/config/authent.htm#xtocid1905215

Re: aaa authentication enable command

Richard Burts — Thu, 11 Aug 2005 20:16:58 GMT

Assuming that your IOS device is otherwise correctly configured for TACACS (has the proper TACACS server address, proper TACACS key) and that the TACACS server is configured to recognize and process this machine as a client for authentication, then using this command:

aaa authentication enable default group tacacs+ enable

will cause the IOS device to send an authentication request to the TACACS server when someone attempts to access privilege mode. If the TACACS server does not respond the IOS device will use the local enable secret (or password) to authenticate enable mode. This is the only thing that you must do on the IOS device. On the TACACS server you must be sure that the user ID is correctly configured for access to this device and the user is checked for level 15 access.

HTH

Rick