242 CHAPTER 8: AAA COMMANDS
Defaults — By default, authentication is deactivated for all console
users, and the default authentication method in a console authentication
rule is none. MSS requires no username or password, by default. These
users can press Enter at the prompts for administrative access.
It is recommended that you change the default setting unless the WX is in
a secure physical location.
Access — Enabled.
History —Introduced in MSS Version 3.0.
The syntax description for the set authentication commands are
separated for clarity. However, the options and behavior for the set
authentication console command are the same as in previous releases.
Usage — You can configure different authentication methods for
different groups of users. (For details, see “User Globs, MAC Address
Globs, and VLAN Globs” on page 30.)
If you specify multiple authentication methods in the set authentication
console command, MSS applies them in the order in which they appear
in the command, with these results:
If the first method responds with pass or fail, the evaluation is final.
If the first method does not respond, MSS tries the second method, and
so on.
However, if local appears first, followed by a RADIUS server group, MSS
ignores any failed searches in the local WX database and sends an
authentication request to the RADIUS server group.
Examples — To set the console port so that it does not enforce
username-password authentication for administrators, type the following
command:
WX4400# set authentication console * none
success: change accepted.
See Also
clear authentication console on page 215
display aaa on page 229