aaa authentication enable default radius

[p.tournier]

Dear all,

I would like to access into the enable mode with two different way.

The first one is by using radius authentication with a telnet connection

The second one is by using the local enable password for a console access

With CatOs we can easily do that but with IOS ?

when I use aaa authentication enable default radius, the radius enable password is used for both (telnet and console access)

Thanks

Best Regards

Pascal

[drolemc]

I'm not too sure if this can be done. I use the command aaa auth login default but that applies to both telnet and console connections. Do let me know if you find a way of doing this.

[Richard Burts]

It is quite possible to differentiate methods of authenticating login (to user mode) so that the console does one thing, the vty does something else, ppp dial in users something, or whatever. Just configure aaa auth login and then under line configuration put login authentication

As far as I know there is not the same kind of flexibility about authenticating for enable mode, which is what the question was about, if I read the question correctly. I do not know how to create or differentiate who would use it for a second kind of authentication for enable.