Command Line Interface Guide
Page 72
LC (Line Configuration) Mode Command Group autobaud enable authentication exec-timeout history history size login authentication password password-aging speed Description Configures the line for automatic baud rate detection (autobaud) Specifies the authentication method list ... Exits the MST region configuration mode without applying configuration changes. Configures the interval that the system waits until user input is the "port default VLAN ID (PVID)". Exits the MST region configuration mode and applies all configuration changes. 72 Command Modes MA (Management Access-level) Mode...
LC (Line Configuration) Mode Command Group autobaud enable authentication exec-timeout history history size login authentication password password-aging speed Description Configures the line for automatic baud rate detection (autobaud) Specifies the authentication method list ... Exits the MST region configuration mode without applying configuration changes. Configures the interval that the system waits until user input is the "port default VLAN ID (PVID)". Exits the MST region configuration mode and applies all configuration changes. 72 Command Modes MA (Management Access-level) Mode...
Command Line Interface Guide
Page 81
.... • list-name - Syntax • aaa authentication login {default | list-name} method1 [method2...] • no authentication. Uses no aaa authentication login {default | list-name} • default - This has the same effect as the default list of all RADIUS servers for authentication. AAA Commands 81 Use... the no form of this argument as the command aaa authentication login default local. Default Configuration The local user database is not defined. Command Mode Global Configuration mode. Uses the local username...
.... • list-name - Syntax • aaa authentication login {default | list-name} method1 [method2...] • no authentication. Uses no aaa authentication login {default | list-name} • default - This has the same effect as the default list of all RADIUS servers for authentication. AAA Commands 81 Use... the no form of this argument as the command aaa authentication login default local. Default Configuration The local user database is not defined. Command Mode Global Configuration mode. Uses the local username...
Command Line Interface Guide
Page 82
...methods, when using access higher privilege levels. (Range: 1 - 12 characters) • method1 [method2...] - Syntax • aaa authentication enable {default | list-name} method1 [method2...] • no authentication is attempted at the local user database. Uses the line password for authentication. Uses the ... To ensure that the authentication algorithm tries, in the command line. User Guidelines • The default and optional list names created with the aaa authentication login command are used to name this argument as the final method in the given sequence. •...
...methods, when using access higher privilege levels. (Range: 1 - 12 characters) • method1 [method2...] - Syntax • aaa authentication enable {default | list-name} method1 [method2...] • no authentication is attempted at the local user database. Uses the line password for authentication. Uses the ... To ensure that the authentication algorithm tries, in the command line. User Guidelines • The default and optional list names created with the aaa authentication login command are used to name this argument as the final method in the given sequence. •...
Command Line Interface Guide
Page 83
...an error, specify none as using the command aaa authentication enable default enable none. Console(config)# aaa authentication enable default enable login authentication The login authentication Line Configuration mode command specifies the login authentication method list for authentication when accessing higher privilege levels. ...This has the same effect as the final method in the command line. • All aaa authentication enable default requests sent by the aaa authentication login command. On the console, the enable password is not set , the process still succeeds. where x ...
...an error, specify none as using the command aaa authentication enable default enable none. Console(config)# aaa authentication enable default enable login authentication The login authentication Line Configuration mode command specifies the login authentication method list for authentication when accessing higher privilege levels. ...This has the same effect as the final method in the command line. • All aaa authentication enable default requests sent by the aaa authentication login command. On the console, the enable password is not set , the process still succeeds. where x ...
Command Line Interface Guide
Page 84
... command. Uses the indicated list created with the aaa authentication enable command. • list-name - Uses the default list created with the aaa authentication login command. Console(config)# line console Console(config-line)# login authentication default enable authentication The enable authentication Line Configuration mode command specifies the authentication method list when accessing a higher privilege...
... command. Uses the indicated list created with the aaa authentication enable command. • list-name - Uses the default list created with the aaa authentication login command. Console(config)# line console Console(config-line)# login authentication default enable authentication The enable authentication Line Configuration mode command specifies the authentication method list when accessing a higher privilege...
Command Line Interface Guide
Page 87
...Login Authentication Method Lists Console_Default: None Network_Default: Local Enable Authentication Method Lists Console_Default: Enable, None Network_Default: Enable AAA Commands 87 Example The following example displays the authentication configuration. show authentication methods The show authentication methods Default... Configuration This command has no user guidelines for this command. User Guidelines There are no default configuration. Syntax • show authentication methods Privileged ...
...Login Authentication Method Lists Console_Default: None Network_Default: Local Enable Authentication Method Lists Console_Default: Enable, None Network_Default: Enable AAA Commands 87 Example The following example displays the authentication configuration. show authentication methods The show authentication methods Default... Configuration This command has no user guidelines for this command. User Guidelines There are no default configuration. Syntax • show authentication methods Privileged ...
Command Line Interface Guide
Page 88
Line Console Telnet SSH Login Method List Default Default Default Enable Method List Default Default Default http https dot1x console# : Local : Local : password The password Line Configuration mode command specifies a password on a console. Encrypted password to remove the password. Password for ... secret on a line. Syntax • password password [encrypted] • no form of this level. (Range: 1 - 159 characters) • encrypted - Use the no password • password - Default Configuration No password is 32 characters.
Line Console Telnet SSH Login Method List Default Default Default Enable Method List Default Default Default http https dot1x console# : Local : Local : password The password Line Configuration mode command specifies a password on a console. Encrypted password to remove the password. Password for ... secret on a line. Syntax • password password [encrypted] • no form of this level. (Range: 1 - 159 characters) • encrypted - Use the no password • password - Default Configuration No password is 32 characters.
Command Line Interface Guide
Page 267
...delimiting character. • When a user connects to a device, the message-of-the-day (MOTD) banner appears first, followed by the login banner and prompts. Delimiting character, for example a pound sign (#). Then enter one or more lines of this command with one or more blank...terminating the message with the corresponding configuration variable. A delimiting character cannot be used in to delete the existing EXEC banner. Default Configuration Disabled (no banner exec • d - Command Mode Global Configuration mode. After the user logs in the banner message. • ...
...delimiting character. • When a user connects to a device, the message-of-the-day (MOTD) banner appears first, followed by the login banner and prompts. Delimiting character, for example a pound sign (#). Then enter one or more lines of this command with one or more blank...terminating the message with the corresponding configuration variable. A delimiting character cannot be used in to delete the existing EXEC banner. Default Configuration Disabled (no banner exec • d - Command Mode Global Configuration mode. After the user logs in the banner message. • ...
Command Line Interface Guide
Page 269
..., the EXEC banner is displayed). User Guidelines • Follow this command to a device, the message-of this command with the corresponding configuration variable. Default Configuration Disabled (no banner login • d - Delimiting character, for example a pound sign (#). After the user logs in to be used in the message text can be included. A delimiting...
..., the EXEC banner is displayed). User Guidelines • Follow this command to a device, the message-of this command with the corresponding configuration variable. Default Configuration Disabled (no banner login • d - Delimiting character, for example a pound sign (#). After the user logs in to be used in the message text can be included. A delimiting...
Command Line Interface Guide
Page 271
.... Syntax • banner motd d message d • no MOTD banner is displayed. A delimiting character cannot be used in the usage guidelines. Default Configuration Disabled (no banner motd • d - Command Mode Global Configuration mode. User Guidelines • Follow this command to the device, the...The banner motd Global Configuration mode command specifies and enables a message-of -the-day (MOTD) banner appears first, followed by the login banner and prompts. Delimiting character, for example a pound sign (#). Then enter one or more lines of text, terminating the message ...
.... Syntax • banner motd d message d • no MOTD banner is displayed. A delimiting character cannot be used in the usage guidelines. Default Configuration Disabled (no banner motd • d - Command Mode Global Configuration mode. User Guidelines • Follow this command to the device, the...The banner motd Global Configuration mode command specifies and enables a message-of -the-day (MOTD) banner appears first, followed by the login banner and prompts. Delimiting character, for example a pound sign (#). Then enter one or more lines of text, terminating the message ...
Command Line Interface Guide
Page 273
... The exec-banner Line Configuration mode command enables the display of exec banners. Syntax • login-banner • no form of this command to disable the display of login banners. Syntax • exec-banner • no exec-banner Default Configuration Enabled Command Mode Line Configuration mode User Guidelines There are no form of...
... The exec-banner Line Configuration mode command enables the display of exec banners. Syntax • login-banner • no form of this command to disable the display of login banners. Syntax • exec-banner • no exec-banner Default Configuration Enabled Command Mode Line Configuration mode User Guidelines There are no form of...
Command Line Interface Guide
Page 274
... this command. Syntax • motd-banner • no user guidelines for this command. User Guidelines There are no motd-banner Default Configuration Enabled Command Mode Line Configuration mode. Console# Console (config)# line console Console(config-line)# motd-banner 274 Login Banner Example The following example enables the display of -the-day banners.
... this command. Syntax • motd-banner • no user guidelines for this command. User Guidelines There are no motd-banner Default Configuration Enabled Command Mode Line Configuration mode. Console# Console (config)# line console Console(config-line)# motd-banner 274 Login Banner Example The following example enables the display of -the-day banners.
Command Line Interface Guide
Page 275
User Guidelines There are no default configuration. Example The following example displays the banners configuration. Command Mode Privileged EXEC mode. Device> show banner Privileged EXEC mode command displays the banners configuration. show banner The show motd Console: Enabled Telnet: Enabled SSH: Enabled MOTD Message $(bold)Upgrade$(bold) to all devices begins at March 12 Login Banner 275 Syntax • show banner motd • show banner login • show banner exec Default Configuration This command has no user guidelines for this command.
User Guidelines There are no default configuration. Example The following example displays the banners configuration. Command Mode Privileged EXEC mode. Device> show banner Privileged EXEC mode command displays the banners configuration. show banner The show motd Console: Enabled Telnet: Enabled SSH: Enabled MOTD Message $(bold)Upgrade$(bold) to all devices begins at March 12 Login Banner 275 Syntax • show banner motd • show banner login • show banner exec Default Configuration This command has no user guidelines for this command.
Command Line Interface Guide
Page 407
...are not subject to disable logging file system events. User Guidelines Other types of this command to this command. Default Configuration Logging AAA login events is enabled. Command Mode Global Configuration mode. Example The following example clears messages from the logging file. ...Indicates logging messages related to disable logging AAA login events. Syntax • aaa logging login • no file-system logging copy Syslog Commands 407 Use the no ]? aaa logging The aaa logging ...
...are not subject to disable logging file system events. User Guidelines Other types of this command to this command. Default Configuration Logging AAA login events is enabled. Command Mode Global Configuration mode. Example The following example clears messages from the logging file. ...Indicates logging messages related to disable logging AAA login events. Syntax • aaa logging login • no file-system logging copy Syslog Commands 407 Use the no ]? aaa logging The aaa logging ...
Command Line Interface Guide
Page 411
...notifications. Messages: 6 Dropped (severity). 2 messages were not logged (resources) Application filtering control Application Event Status AAA Login Enabled Syslog Commands 411 show logging file The show logging file Privileged EXEC mode command displays the state of logging and ...: 0 Dropped (severity). File Messages: 0 Dropped (severity). Buffer Messages: 11 Logged, 200 Max. Console# show logging file Default Configuration This command has no user guidelines for this command. Buffer logging: level debugging. Syslog server 192.180.2.27 logging: errors....
...notifications. Messages: 6 Dropped (severity). 2 messages were not logged (resources) Application filtering control Application Event Status AAA Login Enabled Syslog Commands 411 show logging file The show logging file Privileged EXEC mode command displays the state of logging and ...: 0 Dropped (severity). File Messages: 0 Dropped (severity). Buffer Messages: 11 Logged, 200 Max. Console# show logging file Default Configuration This command has no user guidelines for this command. Buffer logging: level debugging. Syslog server 192.180.2.27 logging: errors....
Command Line Interface Guide
Page 442
... the password is defined (not from the day the aging is defined). • After a password expires a user can login for another 3 times. • 10 days before a password change is forced. (Range: 1 - 365) Default Configuration Password aging is generated. The number of this command to disable password expiration time. Console (config-line)# password...
... the password is defined (not from the day the aging is defined). • After a password expires a user can login for another 3 times. • 10 days before a password change is forced. (Range: 1 - 365) Default Configuration Password aging is generated. The number of this command to disable password expiration time. Console (config-line)# password...
Command Line Interface Guide
Page 443
...syslog message is generated. The level for another 3 times. • 10 days before a password change is forced. (Range: 1 - 365) Default Configuration Password aging is calculated from the day the password was defined, and not from the day the aging was defined. • After a ...• number - User Guidelines • The aging time is disabled. The number of password changes before a password in the local database can login for which the password applies. (Range: 1 - 15) • days - Command Mode Global Configuration mode. Example The following example configures configures...
...syslog message is generated. The level for another 3 times. • 10 days before a password change is forced. (Range: 1 - 365) Default Configuration Password aging is calculated from the day the password was defined, and not from the day the aging was defined. • After a ...• number - User Guidelines • The aging time is disabled. The number of password changes before a password in the local database can login for which the password applies. (Range: 1 - 15) • days - Command Mode Global Configuration mode. Example The following example configures configures...
Command Line Interface Guide
Page 445
... from the history database after becoming 'irrelevant'. Example The following example configures the number of failed login attempts before a user account is locked. (Range: 1 - 5) Default Configuration No locked user account due to remove this command to failed login attempts. By increasing a password 's relevance for tracking its password history to be relevant again. Syntax...
... from the history database after becoming 'irrelevant'. Example The following example configures the number of failed login attempts before a user account is locked. (Range: 1 - 5) Default Configuration No locked user account due to remove this command to failed login attempts. By increasing a password 's relevance for tracking its password history to be relevant again. Syntax...
Command Line Interface Guide
Page 446
Command Mode Global Configuration mode. User Guidelines The login history is enabled. Name of the user. (Range: 1 - 20 characters) Default Configuration This command has no aaa login-history file Default Configuration Writing to the login history file is also saved in the internal buffer of this... to disable writing to the file. Example The following example enables writing to the login history file. Syntax • aaa login-history file • no default configuration. Console(config)# aaa login-history file set username active The set username name active • name - Command...
Command Mode Global Configuration mode. User Guidelines The login history is enabled. Name of the user. (Range: 1 - 20 characters) Default Configuration This command has no aaa login-history file Default Configuration Writing to the login history file is also saved in the internal buffer of this... to disable writing to the file. Example The following example enables writing to the login history file. Syntax • aaa login-history file • no default configuration. Console(config)# aaa login-history file set username active The set username name active • name - Command...
Command Line Interface Guide
Page 450
...Mode Privileged EXEC mode. Name of the user. (Range: 1 - 20 characters) Default Configuration This command has no user guidelines for this command. Syntax • show users login-history Login Time Jan 18 2004 23:58:17 Jan 19 2004 07:59:23 Jan 19 2004... Commands Console# show users login-history [username name] • name - show users login-history The show users login-history Privileged EXEC mode command displays information about the login history of users. Example The following example displays the login history of users. User Guidelines There are no default configuration.
...Mode Privileged EXEC mode. Name of the user. (Range: 1 - 20 characters) Default Configuration This command has no user guidelines for this command. Syntax • show users login-history Login Time Jan 18 2004 23:58:17 Jan 19 2004 07:59:23 Jan 19 2004... Commands Console# show users login-history [username name] • name - show users login-history The show users login-history Privileged EXEC mode command displays information about the login history of users. Example The following example displays the login history of users. User Guidelines There are no default configuration.