diff --git a/config/aaa.py b/config/aaa.py
index dbab270f10..0980703638 100644
--- a/config/aaa.py
+++ b/config/aaa.py
@@ -124,10 +124,10 @@ def timeout(ctx, second):
 
 
 @click.command()
-@click.argument('type', metavar='<type>', type=click.Choice(["chap", "pap", "mschap"]), required=False)
+@click.argument('type', metavar='<type>', type=click.Choice(["chap", "pap", "mschap", "login"]), required=False)
 @click.pass_context
 def authtype(ctx, type):
-    """Specify TACACS+ server global auth_type [chap | pap | mschap]"""
+    """Specify TACACS+ server global auth_type [chap | pap | mschap | login]"""
     if ctx.obj == 'default':
         del_table_key('TACPLUS', 'global', 'auth_type')
     elif type:
@@ -158,7 +158,7 @@ def passkey(ctx, secret):
 @click.argument('address', metavar='<ip_address>')
 @click.option('-t', '--timeout', help='Transmission timeout interval, default 5', type=int)
 @click.option('-k', '--key', help='Shared secret')
-@click.option('-a', '--auth_type', help='Authentication type, default pap', type=click.Choice(["chap", "pap", "mschap"]))
+@click.option('-a', '--auth_type', help='Authentication type, default pap', type=click.Choice(["chap", "pap", "mschap", "login"]))
 @click.option('-o', '--port', help='TCP port range is 1 to 65535, default 49', type=click.IntRange(1, 65535), default=49)
 @click.option('-p', '--pri', help="Priority, default 1", type=click.IntRange(1, 64), default=1)
 def add(address, timeout, key, auth_type, port, pri):