If you have multiple authentication tools that can be used for authentication, you can determine the order in which each tool is used to authenticate users against the appliance. For example, if you have an external LDAP server authenticating users, you can set the order to authenticate users first with LDAP, and then locally on the appliance itself.
The order of the tools used is based on the sequence of tools added to the aaa authentication login default command.
Prerequisites
Admin access
To define the authentication order:
Go to CLI configuration mode:
hostname > enable
hostname # configure terminal
To specify the authentication tool order, use the following command:
For example, if you want to set the authentication order to first authenticate against an LDAP server, second authenticate against a RADIUS server, and finally locally on the appliance, enter the following:
hostname # (config) aaa authentication login default ldap radius local
Central Management System (CMS) > Central Management System System Administration Guide Release 10.x > Appendices > Configuring secure shell (SSH) authentication > User authentication