aaa authentication web-server

Configures the AAA authentication method to access the device through the Web Management Interface.
Syntax
aaa authentication web-server default method-list [ method-list ... ]
no aaa authentication web-server default method-list [ method-list ... ]
Command Default

The AAA authentication is not configured.

Parameters
default
Configures the default authentication method list.
method-list
Configures the following authentication methods.
local
Authenticate using a local username and password you configured on the device. Local usernames and passwords are configured using the username command.
radius
Authenticate using the database on a RADIUS server. You also must identify the server to the device using the radius-server command.
tacacs+
Authenticate using the database on a TACACS+ server. You also must identify the server to the device using the tacacs-server command.
Modes

Global configuration mode

Usage Guidelines

You can specify a primary authentication method and up to six backup authentication methods. If the configured primary authentication fails due to an error, the device tries the backup authentication methods in the order they appear in the list.

The no form of the command removes the authentication method.

From FastIron 09.0.00, the authentication method local can be added only if at least one configured local user is present on the ICX device. Likewise, the last available local user cannot be deleted if either login authentication or web-server authentication is using local as an authentication method.

Examples

The following example shows how to configure the device to use the local user accounts to authenticate access to the device through the Web Management Interface. If the device does not have a user account that matches the username and password entered by the user, the user is not granted access.

device# configure terminal
device(config)# aaa authentication web-server default local
History
Release version Command history
08.0.90 The command was modified as described in the usage guidelines.
09.0.00 The command was modified to remove enable, line, tacacs, and none from available web-server authentication methods.