Configuring Login Authentication - Cisco WS-C2950-24 Configuration Manual

Configuring TACACS+

Configuring Login Authentication

Command
Step 1 configure terminal
Step 2
aaa new-model
Step 3
aaa authentication login
{default | list-name} method1
[method2...]
Step 4
line [aux | console | tty | vty]
line-number
[ending-line-number]
Step 5
login authentication {default |
list-name}
Step 6 exit
Step 7
show running-config
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide
6-64
Beginning in privileged EXEC mode, follow these steps to configure login
authentication by using AAA/TACACS+:
Purpose
Enter global configuration mode.
Enable AAA/TACACS+.
Enable authentication at login, and create one or more lists
of authentication methods.
Enter line configuration mode, and configure the lines to
which you want to apply the authentication list.
Apply the authentication list to a line or set of lines.
Return to privileged EXEC mode.
Verify your entries.
The variable list-name is any character string used to name the list you are
creating. The method variable refers to the actual methods the authentication
algorithm tries, in the sequence entered. You can choose one of these methods:
line—Uses the line password for authentication. You must define a line
•
password before you can use this authentication method. Use the password
password line configuration command.
• local—Uses the local username database for authentication. You must enter
username information into the database. Use the username password global
configuration command.
tacacs+—Uses TACACS+ authentication. You must configure the
•
TACACS+ server before you can use this authentication method. For more
information, see the
page 6-62.
"Configuring the TACACS+ Server Host" section on
Chapter 6 Configuring the System
78-6511-05