aaa authentication behaviour

[mahesh18]

Hi All,

I am trying these two command to be on switch at same time but switch only takes one command on its running config

3550SMIA#sh run | inc aaa

aaa new-model

aaa authentication login MP group tacacs+ enable                 1

aaa authorization exec default local

aaa authorization exec MP none

aaa session-id common

3550SMIA#config t

Enter configuration commands, one per line.  End with CNTL/Z.

3550SMIA(config)#aaa authentication login MP none                2

3550SMIA(config)#end

3550SMIA#sh run | inc aaa

aaa new-model

aaa authentication login MP none

aaa authorization exec default local

aaa authorization exec MP none

aaa session-id common

3550SMIA#

As you can see the command 1 is gone now.

Is this the default behaviour with aaa authentication command ?

Regards

MAhesh

[Marvin Rhoads · Accepted solution]

If you want both login authentication methods (TACACS+ with fallback to none) then they need to be concatenated on one line. e.g.:

     aaa authentication login MP group tacacs+ enable none

See the example in the command reference here.

[mahesh18]

Many thanks Marvin.