Changing the login authentication mode

You can set the authentication mode with the aaa authentication login command.

You can reset the configuration to the default value using the no aaa authentication login command.

Note

Note

In a configuration with primary and secondary sources of authentication, the primary mode cannot be modified alone. First remove the existing configuration and then configure it to the required configuration.
  1. In privileged EXEC mode, use the configure terminal command to enter global configuration mode.
    device# configure terminal
    Entering configuration mode terminal
  2. Enter the aaa authentication login command and specify the desired authentication mode.
    device(config)# aaa authentication login radius local
    ** or **
    device(config)# aaa authentication login tacacs+ local
    
  3. Verify the configuration with the do show running-config aaa command.
    device(config)# do show running-config aaa
    aaa authentication login radius local
  4. Log in to the device using an account with TACACS+ credentials. The login should fail with an "access denied" error.
  5. Log in to the device using an account with RADIUS credentials. The login should succeed.