Cisco AS5800 Specifications download pdf (Page 273)

A-13

Cisco AS5800 Operations, Administration, Maintenance, and Provisioning Guide

DOC-7810814=

Appendix A Advanced Quick Reference

Advanced Quick Reference Configurations

5800(config)# aaa authentication login LOCAL none

Configures an authentication method list called LOCAL that consults the local database of user names

and passwords.

5800(config)# aaa authentication login USE-RADIUS group radius local

Defines the login authentication for method list USE-RADIUS that points to RADIUS server. User will

be authenticated against the RADIUS database. Configure an authentication method list called

USE-RADIUS that uses the global RADIUS server list. If the RADIUS servers do not respond, then

fallback to the local user database.

5800(config)# aaa authentication login USE-TACACS tacacs+ enable

Defines the login authentication for method list USE-TACACS that point to TACACS+ server. Users will

be authenticated against the TACACS+ database. Configure an authentication method list called

USE-TACACS that uses the global TACACS+ server list. If the TACACS+ servers do not respond,

fallback to using the enable password.

5800(config)# aaa authentication enable default enable tacacs+

Defines the authentication method for enable privilege on the router. The method list is called “default”

and it points to the enable password defined on the router and then to the TACACS+ server.

5800(config)# aaa authentication ppp USE-RADIUS if-needed radius

Defines the authentication method for PPP users. Method list is called “USE-RADIUS” and it points to

the radius server if authentication is required. The “if-needed” option states that if users have already

been authenticated then do not re-authenticate them. Configure an authentication method list called

USE-RADIUS that uses the global RADIUS server list.

5800(config)# username cisco password cisco

Defines the username and password locally on the router for local authentication. Configure a local user

account to authenticate when the RADIUS server is not available.

To Modify, Copy, & Paste

aaa new-model

aaa authentication login CONSOLE none

aaa authentication login USE-RADIUS radius

aaa authentication login TAC_PLUS tacacs+ enable

aaa authentication login LOCAL local

aaa authentication enable default enable tacacs+

aaa authentication ppp USE-RADIUS if-needed radius

username cisco password cisco

AAA Authorization Configuration

The following Cisco IOS CLI script serves as a sample AAA authorization configuration or setup.

Sample Configuration

5800(config)# aaa authorization exec USE-RADIUS group radius if-authenticated

5800(config)# aaa authorization exec USE-TACACS group tacacs+ if-authenticated

5800(config)# aaa authorization network default radius if-authenticated

5800(config)# aaa authorization network USE-RADIUS group radius if-authenticated

1 2 ... 268 269 270 271 272 273 274 275 276 277 278 ... 333 334

Comments to this Manuals

No comments

Cisco AS5800 Specifications Page 273

Comments to this Manuals

Related products and manuals for Servers Cisco AS5800