topic AAA Authentication in Network Security

AAA Authentication

hs08 — Mon, 28 Oct 2024 03:47:39 GMT

Hello,

I have radius group called ADRADIUS for centralize SSH login using Active Directory user.

Anyone know whay different between two command below? What different between WORD and default after login syntax?

aaa authentication login ADRADIUS local group ADRADIUS
aaa authentication login default local group ADRADIUS

Re: AAA Authentication

Ambuj M — Mon, 28 Oct 2024 04:03:33 GMT

using "WORD" allows you to create custom authentication methods that can be applied to specific interfaces or lines (like console, vty lines, or other access methods). You can configure multiple named method lists and apply them selectively depending on where you want different authentication mechanisms.

using "default" you define global default authentication method for all lines or interfaces unless overridden by a named method list

Re: AAA Authentication

hs08 — Mon, 28 Oct 2024 04:17:23 GMT

using "default" you define global default authentication method for all lines or interfaces

If we use "default", are we still need to issue command "login authentication default" on line vty for example?

Re: AAA Authentication

Ambuj M — Mon, 28 Oct 2024 04:58:19 GMT

If you use the default method list, it automatically applies to all lines unless a different method list is explicitly defined.

some admins will add the command "login authentication default" for clarity purposes but you don't have to

Re: AAA Authentication

Cristian Matei — Wed, 30 Oct 2024 13:11:00 GMT

Hi,

Nope, only if you use a named list (so not the default list).

Best,

Cristian.