AAA Authentication

[hs08]

Hello,

I have radius group called ADRADIUS for centralize SSH login using Active Directory user.

Anyone know whay different between two command below? What different between WORD and default after login syntax?

aaa authentication login ADRADIUS local group ADRADIUS
aaa authentication login default local group ADRADIUS

[ammahend]

using "WORD" allows you to create custom authentication methods that can be applied to specific interfaces or lines (like console, vty lines, or other access methods). You can configure multiple named method lists and apply them selectively depending on where you want different authentication mechanisms.

using "default" you define global default authentication method for all lines or interfaces unless overridden by a named method list

[hs08]

using "default" you define global default authentication method for all lines or interfaces

If we use "default", are we still need to issue command "login authentication default" on line vty for example?

[ammahend · Accepted solution]

If you use the default method list, it automatically applies to all lines unless a different method list is explicitly defined.

some admins will add the command "login authentication default" for clarity purposes but you don't have to

[Cristian Matei]

Hi,

Nope, only if you use a named list (so not the default list). 

Best,

Cristian.