Selecting the access method for configuration

The aaa authentication command configures access control for the following access methods:

  • Console

  • Telnet

  • SSH

  • Web

  • Port-access (802.1X)

  • REST

However, TACACS+ authentication is only used with the console, Telnet, REST, or SSH access methods. The command specifies whether to use a TACACS+ server or the switch local authentication, or (for some secondary scenarios) no authentication. This means that if the primary method fails, authentication is denied. The command also reconfigures the number of access attempts to allow in a session if the first attempt uses an incorrect user name/password pair.