Cisco Cisco IOS Software Release 12.4(2)XB6 Références techniques

The additional methods of authentication are used only if the previous method returns an error, not if it 
fails. Specify none as the final method in the command line to have authentication succeed even if all 
methods return an error.

If authentication is not specifically set for a function, the default is none and no authentication is 
performed. Use the more system:running-config command to display currently configured lists of 
authentication methods.

, the group radius, group tacacs+, and group group-name methods refer to a set of previously 

defined RADIUS or TACACS+ servers. Use the radius-server host and tacacs+-server host commands 
to configure the host servers. Use the aaa group server radius and aaa group server tacacs+ 
commands to create a named group of servers.

The   supports a maximum of 2,000 AAA method lists. If you configure more than 2,000 AAA method 
lists, traceback messages appear on the console.

The following example shows how to create a AAA authentication list called

MIS-access for serial lines 

that use PPP. This authentication first tries to contact a TACACS+ server. If this action returns an error, 
the user is allowed access with no authentication.

aaa authentication ppp MIS-access group tacacs+ none

Here is a sample configuration command for PAP authentication on the BWG. 

!

aaa authentication  ppp default group radius

!

Does not authenticate if the user has already been authenticated on a tty line.

Uses Kerberos 5 for authentication (can be used only for Password Authentication 
Protocol [PAP] authentication).

Uses the local username database for authentication.

Uses case-sensitive local username authentication.

Uses no authentication.

cache group-name

Uses a cache server group for authentication.

Uses the list of all RADIUS servers for authentication.

Uses the list of all TACACS+ servers for authentication.

group group-name  Uses a subset of RADIUS or TACACS+ servers for authentication as defined by 

the aaa group server radius or aaa group server tacacs+ command.