Table Of Contents

A Commands

aaa authentication login console

aaa authentication login default

aaa authentication login error-enable

aaa authentication login mschap

aaa group server tacacs+

attach module

A Commands

---

This chapter describes the Cisco Nexus 1010 commands that begin with the letter A.

aaa authentication login console

To configure AAA authentication methods for console logins, use the aaa authentication login console command. To revert to the default, use the no form of this command.

aaa authentication login console {group group-list} [none] | local | none}

no aaa authentication login console {group group-list [none] | local | none}

Syntax Description

group	Specifies to use a server group for authentication.
group-list	Space-separated list of server groups. The list can include the following: •tacacs+ for all configured TACACS+ servers. •Any configured TACACS+ server group name.
none	(optional) Specifies to use the username for authentication.
local	(optional) Specifies to use the local database for authentication.

Defaults

local

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release	Modification
4.0(4)SP1(1)	This command was introduced.

Examples

This example shows how to configure the AAA authentication console login methods:

n1010# configure terminal

n1010(config)# aaa authentication login console group tacacs+

This example shows how to revert to the default AAA authentication console login method:

n1010# configure terminal

n1010(config)# no aaa authentication login console group tacacs+

Related Commands

Command	Description
aaa group server tacacs+	Create a TACACS+ server group.
show aaa authentication	Displays AAA authentication information.
show aaa groups	Displays the AAA server groups.
tacacs-server host	Configures TACACS+ servers.

aaa authentication login default

To configure the default AAA authentication methods, use the aaa authentication login default command. To revert to the default, use the no form of this command.

aaa authentication login default {group group-list} [none] | local | none}

no aaa authentication login default {group group-list [none] | local | none}

Syntax Description

group	Specifies a server group list to be used for authentication.
group-list	Space-separated list of server groups that can include the following: •tacacs+ for all configured TACACS+ servers. •Any configured TACACS+ server group name.
none	(Optional) Specifies to use the username for authentication.
local	Specifies to use the local database for authentication.

Defaults

local

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release	Modification
4.0(4)SP1(1)	This command was introduced.

Examples

This example shows how to configure the AAA authentication console login method:

n1010# configure terminal

n1010(config)# aaa authentication login default group tacacs

This example shows how to revert to the default AAA authentication console login method:

n1010# configure terminal

n1010(config)# no aaa authentication login default group tacacs

Related Commands

Command	Description
aaa group server tacacs+	Create a TACACS+ server group.
show aaa authentication	Displays AAA authentication information.
show aaa groups	Displays the AAA server groups.
tacacs-server host	Configures TACACS+ servers.

aaa authentication login error-enable

To configure an AAA authentication failure message to display on the console, use the aaa authentication login error-enable command. To remove the error message, use the no form of this command.

aaa authentication login error-enable

no aaa authentication login error-enable

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release	Modification
4.0(4)SP1(1)	This command was introduced.

Usage Guidelines

If none of the remote AAA servers respond when a user logs in, the authentication is processed by the local user database. If you have enabled the display, one of the following messages is generated for the user:

Remote AAA servers unreachable; local authentication done.

Remote AAA servers unreachable; local authentication failed.

Examples

This example shows how to enable the display of AAA authentication failure messages to the console:

n1010# configure terminal

n1010(config)# aaa authentication login error-enable

This example shows how to disable the display of AAA authentication failure messages to the console:

n1010# configure terminal

n1010(config)# no aaa authentication login error-enable

Related Commands

Command	Description
show aaa authentication	Displays the configuration for AAA authentication.

aaa authentication login mschap

To enable Microsoft Challenge Handshake Authentication Protocol (MSCHAP) authentication at login, use the aaa authentication login mschap command. To disable MSCHAP, use the no form of this command.

aaa authentication login mschap

no aaa authentication login mschap

Syntax Description

This command has no arguments or keywords.

Defaults

Disabled

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release	Modification
4.0(4)SP1(1)	This command was introduced.

Examples

This example shows how to enable MSCHAP authentication:

n1010# configure terminal

n1010(config)# aaa authentication login mschap

This example shows how to disable MSCHAP authentication:

n1010# configure terminal

n1010(config)# no aaa authentication login mschap

Related Commands

Command	Description
show aaa authentication	Displays the configuration for AAA authentication.

aaa group server tacacs+

To create a TACACS+ server group, use the aaa group server tacacs+ command. To delete a TACACS+ server group, use the no form of this command.

aaa group server tacacs+ group-name

no aaa group server tacacs+ group-name

Syntax Description

group-name

TACACS+ server group name. The name is alphanumeric and case sensitive. The maximum length is 64 characters.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release	Modification
4.0(4)SP1(1)	This command was introduced.

Usage Guidelines

You must enable TACACS+ using the tacacs+ enable command before you can configure TACACS+.

Examples

This example shows how to create a TACACS+ server group:

n1010# configure terminal

n1010(config)# aaa group server tacacs+ TacServer

n1010(config-taccs+)#

This example shows how to delete a TACACS+ server group:

n1010# configure terminal

n1010(config)# no aaa group server tacacs+ TacServer

Related Commands

Command	Description
show aaa groups	Displays server group information.
tacacs+ enable	Enables TACACS+.

attach module

To access the standby Virtual Supervisor Module (VSM) console from the active VSM, use the attach module command.

attach module module-number

Syntax Description

module-number

Number that identifies an existing module. The range is from 1 to 66. Note Only one value, 2, is operational.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History

Release	Modification
4.0(4)SP1(1)	This command was introduced.

Examples

This example shows how to attach to the console of the secondary VSM:

n1010# configure terminal

n1010(config)# attach module 2

n1010# 

Usage Guidelines

Although the allowable range of module numbers is from 1 to 66, only one value, 2, is operational.

Related Commands

Command	Description
reload module	Reloads a module.
show cores	Displays a list of cores.
show processes	Displays the state and the start count of all processes.