Configuring Local Aaa Security - Cisco AS5400 Quick Start Manual

Gateway con0 is now available
Press RETURN to get started.
Gateway> enable
Password:
Gateway# show privilege
Current privilege level is 15
Gateway#

Configuring Local AAA Security

Configure authentication, authorization, and accounting (AAA) to perform log in authentication by using the local username
database. The login keyword authenticates EXEC shell users. Additionally, configure PPP authentication to use the local
database if the session was not already authenticated by login.
AAA (called triple A) is the Cisco IOS security model used on all Cisco devices. AAA provides the primary framework through
which you set up access control on the Cisco AS5350 or Cisco AS5400.
The same authentication method is used on all interfaces. AAA is set up to use the local database configured on the gateway.
This local database is created with the username configuration commands.
Enter global configuration mode. You are in global configuration mode when your prompt changes to
Step 1
Gateway(config)#
Gateway# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Gateway(config)#
Create a local login username database in global configuration mode. In this example, the administrator's username is
Step 2
admin. The remote client's login username is Harry.
Gateway(config)# username admin password adminpasshere
Gateway(config)# username Harry password Harrypasshere
Configure local AAA security in global configuration mode. You must enter the aaa new-model command before the
Step 3
other two authentication commands.
Gateway(config)# aaa new-model
Gateway(config)# aaa authentication login default local
Gateway(config)# aaa authentication ppp default if-needed local
Return to privileged EXEC mode:
Step 4
Gateway(config)# Ctrl-Z
Gateway#
Log in with your username and password:
Step 5
After you have configured AAA security, all access will require a username and password. Make sure that your
Caution
login name and password are working before you exit or reboot. If you are unable to get back into your universal
gateway, refer to the password recovery instructions at the following URL:
http://www.cisco.com/warp/public/474/pswdrec_as5300.shtml
Gateway# login
User Access Verification
Username: admin
Password:
Gateway#
.
37