cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
595
Views
0
Helpful
2
Replies

aaa authentication enable command

krishnas
Level 1
Level 1

Hi,

If I configure following command, how can I enter enable user name and password to get into enable prompt? Can someone explain to me how to enable tacacs autherntication for enable access?

"aaa authentication enable default group tacacs+ enable",

TIA

krishna

2 Replies 2

owillins
Level 6
Level 6

Richard Burts
Hall of Fame
Hall of Fame

Assuming that your IOS device is otherwise correctly configured for TACACS (has the proper TACACS server address, proper TACACS key) and that the TACACS server is configured to recognize and process this machine as a client for authentication, then using this command:

aaa authentication enable default group tacacs+ enable

will cause the IOS device to send an authentication request to the TACACS server when someone attempts to access privilege mode. If the TACACS server does not respond the IOS device will use the local enable secret (or password) to authenticate enable mode. This is the only thing that you must do on the IOS device. On the TACACS server you must be sure that the user ID is correctly configured for access to this device and the user is checked for level 15 access.

HTH

Rick

HTH

Rick