Cisco Catalyst 2960-XR Security Configuration Manual page 336

Configuring AAA Authentication
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2
aaa new-model
Example:
Switch(config)# aaa new-model
Step 3 aaa authentication login default group {tacacs+ | radius}
Example:
Switch(config)# aaa authentication login default group
tacacs+
Step 4 aaa authorization auth-proxy default group {tacacs+ |
radius}
Example:
Switch(config)# aaa authorization auth-proxy default
group tacacs+
Step 5 tacacs-server host {hostname | ip_address}
Example:
Switch(config)# tacacs-server host 10.1.1.1
Step 6 tacacs-server key {key-data}
Example:
Switch(config)# tacacs-server key
Step 7
end
Example:
Switch(config)# end
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
314
Configuring Web-Based Authentication
Purpose
Enters the global configuration mode.
Enables AAA functionality.
Defines the list of authentication methods at login.
Creates an authorization method list for web-based
authorization.
Specifies an AAA server.
Configures the authorization and encryption key
used between the switch and the TACACS server.
Returns to privileged EXEC mode.
OL-29434-01