Configuring A Switch For Local Aaa - Cisco Catalyst 2950 Software Manual

Chapter 6 Configuring the System
Beginning in privileged EXEC mode, follow these steps to enable TACACS+ accounting:
Command
Step 1
configure terminal
Step 2
aaa accounting exec start-stop
tacacs+
Step 3
aaa accounting network start-stop
tacacs+
Step 4
exit
Step 5 show running-config
These commands are documented in the "Accounting and Billing Commands" chapter of the Cisco IOS
Note
Release 12.1 Security Command Reference.

Configuring a Switch for Local AAA

You can configure AAA to operate without a server by setting the switch to implement AAA in local
mode. The switch then verifies authentication and authorization. No accounting is available in this
configuration.
Beginning in privileged EXEC mode, follow these steps to configure the switch for local AAA:
Command
Step 1 configure terminal
Step 2
aaa new-model
Step 3
aaa authentication login
default local
Step 4
aaa authorization exec local
Step 5
aaa authorization network
local
Step 6
username name privilege level
password password
Step 7 show running-config
78-11380-03
Purpose
Enter global configuration mode.
Enable TACACS+ accounting to send a start-record accounting
notice at the beginning of an EXEC process and a stop-record at
the end.
Enable TACACS+ accounting for all network-related service
requests, including SLIP, PPP, and PPP NCPs.
Return to privileged EXEC mode.
Verify your entries.
Purpose
Enter global configuration mode.
Enable AAA.
Set the login authorization to default to local.
Configure user AAA authorization for all network-related service
requests, including SLIP, PPP NCPs, and ARA protocols.
Configure user AAA authorization to determine if the user is
allowed to run a privileged EXEC shell.
Enter the local database.
Repeat this command for each user.
Verify your entries.
Catalyst 2950 Desktop Switch Software Configuration Guide
Configuring TACACS+
6-23