Cisco AS5800 Specifications download pdf (Page 272)

A-12

Cisco AS5800 Operations, Administration, Maintenance, and Provisioning Guide

DOC-7810814=

Appendix A Advanced Quick Reference

Advanced Quick Reference Configurations

AAA

Triple A security in billing that stands for Authentication, Authorization and Accounting.

AAA Plan and Requisites

The following requisites are significant considerations to identify before configuring AAA:

• Dial in authentication method

• Dial in authorization method

• Dial in accounting method

• Administrative AAA method

For detailed AAA configuration information, refer to Authentication, Authorization, and Accounting

(AAA), available online at

http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/secur_c/scprt1/

AAA Server Options

The following AAA server options are significant network design considerations:

• AAA servers

• Backup plan

For detailed RADIUS Server configuration information, refer to RADIUS Commands, available online at

http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/secur_r/srprt2/

AAA Authentication Configuration

The following Cisco IOS CLI script serves as a sample AAA authentication configuration or setup.

Sample Configuration

5800(config)# aaa new-model

5800(config)# aaa authentication login CONSOLE none

5800(config)# aaa authentication login LOCAL none

5800(config)# aaa authentication login USE-RADIUS group radius local

5800(config)# aaa authentication login USE-TACACS tacacs+ enable

5800(config)# aaa authentication enable default enable tacacs+

5800(config)# aaa authentication ppp USE-RADIUS if-needed radius

5800(config)# username cisco password cisco

Command Line Description

5800(config)# aaa new-model

Turns on the AAA process on a Cisco router. Enables the AAA security paradigm.

5800(config)# aaa authentication login CONSOLE none

Configure an authentication method list called CONSOLE that requires no authentication. Defines the

so there is no authentication for method list CONSOLE.

1 2 ... 267 268 269 270 271 272 273 274 275 276 277 ... 333 334

No comments

Cisco AS5800 Specifications Page 272