Configuring Tacacs+ Login Authentication - Cisco Catalyst 2960-XR Security Configuration Manual

Configuring TACACS+
Related Topics
TACACS+ Configuration Options, on page 42

Configuring TACACS+ Login Authentication

Beginning in privileged EXEC mode, follow these steps to configure TACACS+ login authentication:
Before You Begin
To configure AAA authentication, you define a named list of authentication methods and then apply that list
to various ports.
To secure the switch for HTTP access by using AAA methods, you must configure the switch with the ip
Note
http authentication aaa global configuration command. Configuring AAA authentication does not secure
the switch for HTTP access by using AAA methods.
For more information about the ip http authentication command, see the Cisco IOS Security Command
Reference, Release 12.4.
SUMMARY STEPS
1. configure terminal
2. aaa new-model
3. aaa authentication login {default | list-name} method1 [method2...]
4. line [console | tty | vty] line-number [ending-line-number]
5. login authentication {default | list-name}
6. end
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2
aaa new-model
Example:
Switch(config)# aaa new-model
OL-29434-01
Purpose
Enters the global configuration mode.
Enables AAA.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
Configuring TACACS+ Login Authentication
45