CISCO IOS in a Nutshell

Name

aaa authentication ppp — global

Synopsis

aaa authentication ppp {default |listname} method ...method
no aaa authentication ppp

Configures

AAA authentication method for PPP

Default

local

Description

This command defines a named list of authentication methods that can be used when a user starts a PPP session. The listname parameter specifies the name of the list; the login authentication command is used to apply a list. default is a special list name; the default list specifies the authentication methods to be used by default (i.e., in the absence of explicit login authentication commands). method describes where to get the password for authentication. If more than one method is listed, they are tried in order until one succeeds or all fail. The valid methods are enable, krb5, line, local, none, radius, tacacs+, and krb5-telnet.

Example

The following command defines the default list of authentication methods for PPP users. Because this is the default list, it applies to all PPP users, even if there is no login authentication command. The router attempts to use the tacacs+ method for authentication; if the device cannot contact the TACACS+ server, no other authentication is attempted, and the connection is rejected.

! Set authentication for ppp
aaa authentication ppp default tacacs+ none