Configuration Considerations for Authentication-method Lists

  • For CLI access, you must configure authentication-method lists if you want the device to authenticate access using local user accounts or a TACACS+ or RADIUS server. Otherwise, the device will authenticate using only the locally based password for the Super User privilege level.
  • If aaa authentication login/snmp/web/enable default local is enabled, the last local user cannot be deleted. The last local user can be deleted only when RADIUS or TACACS+ server is configured as the authentication method.
Parent topic: Authentication-Method List Overview