Cisco Catalyst 2960-XR Security Configuration Manual page 104

Configuring the Switch for Local Authentication and Authorization
SUMMARY STEPS
1. configure terminal
2. aaa new-model
3. aaa authentication login default local
4. aaa authorization exec local
5. aaa authorization network local
6. username name [privilege level] {password encryption-type password}
7. end
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2 aaa new-model
Example:
Switch(config)# aaa new-model
Step 3 aaa authentication login default local
Example:
Switch(config)# aaa authentication login
default local
Step 4
aaa authorization exec local
Example:
Switch(config)# aaa authorization exec
local
Step 5
aaa authorization network local
Example:
Switch(config)# aaa authorization
network local
Step 6
username name [privilege level] {password
encryption-type password}
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
82
Configuring Local Authentication and Authorization
Purpose
Enters the global configuration mode.
Enables AAA.
Sets the login authentication to use the local username database. The
default keyword applies the local user database authentication to all
ports.
Configures user AAA authorization, check the local database, and
allow the user to run an EXEC shell.
Configures user AAA authorization for all network-related service
requests.
Enters the local database, and establishes a username-based
authentication system.
OL-29434-01