Login authentication modes
You can configure login authentication to prevent illegal access to the device CLI.
In non-FIPS mode, the device supports the following login authentication modes:
None—Disables authentication. This mode allows access without authentication and is insecure.
Password—Requires password authentication. A user must provide the correct password at login.
Scheme—Uses the AAA module to provide local or remote login authentication. A user must provide the correct username and password at login.
In FIPS mode, the device supports only the scheme authentication mode.
Different login authentication modes require different user line configurations, as shown in Table 12.
Table 12: Configuration required for different login authentication modes
Authentication mode | Configuration tasks |
---|---|
None | Set the authentication mode to none. |
Password |
|
Scheme |
|