authentication-mode (user interface view)
Function
The authentication-mode command configures the authentication mode for accessing the user interface.
The undo authentication-mode command deletes the authentication mode for accessing the user interface.
By default, password authentication is used for console port login and aaa authentication is used for login on the VTY user interface.
Parameters
Parameter | Description | Value |
---|---|---|
aaa | Indicates the AAA authentication mode. | - |
password | Indicates the password authentication mode. | - |
Usage Guidelines
Usage Scenario
When a user logs in to the device using the console interface for the first time, the system prompts the user to set the login password. After the user logs in to the device, the user can run the authentication-mode command to change the authentication mode.
Before Telnet or SSH users log in to the device using VTY user interface, they must run the authentication-mode command to configure the authentication mode.
Precautions
To ensure that users can log in to the device successfully, configure the authentication mode.
After you set the authentication mode for accessing a user interface to password, run the set authentication password command to configure an authentication password. Keep the password safe. You need to enter the password when logging in to the device. The levels of commands accessible to a user depends on the level configured for the user interface to which the user logs in.
When the authentication mode is set to aaa, the authentication password is deleted at the same time. Users are required to enter the login user name and password to log in to the device. After login, the level of the commands the user can run depends on the level of the local user specified in AAA configuration. If no level is specified for a local AAA user, the user uses the level in the current user interface by default.
When the undo authentication-mode is used to delete an authentication mode of a user interface, you will be prompted to confirm whether to clear the passwords set for the user interface.