topic Re: aaa authentication enable default radius in Network Access Control

aaa authentication enable default radius

p.tournier — Sun, 10 Mar 2019 14:49:45 GMT

Dear all,

I would like to access into the enable mode with two different way.

The first one is by using radius authentication with a telnet connection

The second one is by using the local enable password for a console access

With CatOs we can easily do that but with IOS ?

when I use aaa authentication enable default radius, the radius enable password is used for both (telnet and console access)

Thanks

Best Regards

Pascal

Re: aaa authentication enable default radius

drolemc — Fri, 28 May 2004 13:30:41 GMT

I'm not too sure if this can be done. I use the command aaa auth login default but that applies to both telnet and console connections. Do let me know if you find a way of doing this.

Re: aaa authentication enable default radius

Richard Burts — Fri, 28 May 2004 15:10:38 GMT

It is quite possible to differentiate methods of authenticating login (to user mode) so that the console does one thing, the vty does something else, ppp dial in users something, or whatever. Just configure aaa auth login and then under line configuration put login authentication

As far as I know there is not the same kind of flexibility about authenticating for enable mode, which is what the question was about, if I read the question correctly. I do not know how to create or differentiate who would use it for a second kind of authentication for enable.