aaa authentication snmp-server
aaa authentication
snmp-server
default
method-list
[
method-list
...
]no aaa authentication
snmp-server
default
method-list
[
method-list
...
]The AAA authentication method list is not configured.
Global configuration mode
You can specify a primary authentication method and up to six backup authentication methods. If the configured primary authentication fails due to an error, the device tries the backup authentication methods in the order they appear in the list.
From FastIron 09.0.00, the authentication method local can be added only if at least one configured local user is present on the ICX device. Likewise, the last available local user cannot be deleted if either login authentication or web-server authentication is using local as an authentication method.
When this command is enabled, community string validation is not performed for incoming SNMP v1and v2c packets. This command takes effect as long as the first varbind for SNMP packets is set to one of the following:
- snAgGblPassword=" username password " (for AAA method local)
- snAgGblPassword=" password " (for AAA method line, enable)
If AAA is set up to check both the username and password, the string contains the
username, followed by a space and then the password. If AAA is set up to authenticate
with the current Enable or Line password, the string contains the password only. The
configuration can be overridden by the
no snmp-server pw-check command, which disables password checking for SNMP SET requests.
The
no form of the command removes the authentication method.
| Release version | Command history |
|---|---|
| 08.0.90 | The command was modified as described in the usage guidelines. |
| 09.0.00 | The command was modified to remove these options: enable, none, line, tacacs. |