Enables the username and password Web Authentication mode.

auth-mode username-password [ auth-methods {radius [ local ] | local [radius ] } | local-user-database database-name ]
no auth-mode username-password [ auth-methods {radius [ local ] | local [radius ] } | local-user-database database-name ]

Username password authentication is not enabled.

auth-methods
Configures the authentication method.
radius
Uses the RADIUS server to authenticate.
local
Uses the local user database to authenticate.
local-user-database database-name
Uses the usernames and passwords in the specified database to authenticate.

Web Authentication configuration mode

You can optionally specify a failover sequence for RADIUS and local user database authentication methods. For example, you can configure Web Authentication to first use a local user database to authenticate users in a VLAN. If the local user database is not available, it will use a RADIUS server. You can specify the local and radius options one after the other in the required sequence to configure the failover sequence.

The no form of the command removes the username password authentication.

The following example uses a local user database to authenticate users in a VLAN. 

device(config)# vlan 10
device(config-vlan-10)# webauth
device(config-vlan-10-webauth)# auth-mode username-password auth-methods local

The following example uses the usernames and passwords in the specified database to authenticate. 

device(config)# vlan 10
device(config-vlan-10)# webauth
device(config-vlan-10-webauth)# auth-mode username-password local-user-database

The following example configures a failover sequence for RADIUS and local user database authentication methods. In this example, Web Authentication first uses a local user database to authenticate users in a VLAN. If the local user database is not available, it will use a RADIUS server. 

device(config)# vlan 10
device(config-vlan-10)# webauth
device(config-vlan-10-webauth)# auth-mode username-password auth-methods local radius