Device(config)# aaa authentication login default group loginrad Before you can use a group name as the login authentication method, you need to enable communication with the RADIUS or TACACS+ security server. For more information about establishing communication with a RADIUS server, refer to the chapter “Configuring RADIUS.” For more information about establishing communication with a TACACS+ server, refer to the chapter “Configuring TACACS+.” PPP Authentication Using AAA PPP Authentication Using Local Password Use the aaa authentication ppp default command with the local keyword to specify that the Cisco device will use the local username database for authentication.
For example, to specify the local username database as the method of authentication for use on lines running PPP when no other method list has been defined, enter the following command: Device(config)# aaa authentication ppp default local PPP Authentication Using Group RADIUS Use the aaa authentication ppp default group radius command to specify RADIUS as the login authentication method. For example, to specify RADIUS as the method of user authentication at login when no other method list has been defined, enter the following command:
Device(config)# aaa authentication ppp default group radius Before you can use RADIUS as the PPP authentication method, you need to enable communication with the RADIUS security server. For more information about establishing communication with a RADIUS server, refer to the chapter “Configuring RADIUS.” RADIUS Attribute 44 in Access Requests After you have used the aaa authentication ppp default group radius command to specify RADIUS as the login authentication method, you can configure your device to send attribute 44 (Acct-Session-ID) in access-request packets by using the radius-server attribute 44 include-in-access-req command in global configuration mode.
This command allows the RADIUS daemon to track a call from the beginning to the end. PPP Authentication Using Group TACACS Use the aaa authentication ppp default group tacacs+ command to specify TACACS+ as the login authentication method. For example, to specify TACACS+ as the method of user authentication at login when no other method list has been defined, enter the following command: Device(config)# aaa authentication ppp default group tacacs+ Before you can use TACACS+ as the PPP authentication method, you need to enable communication with the TACACS+ security server.
For more information about establishing communication with a TACACS+ server, refer to the chapter “Configuring TACACS+.” PPP Authentication Using Group Name Use the aaa authentication ppp default command with the group group-name method to specify a subset of RADIUS or TACACS+ servers to use as the login authentication method. To specify and define the group name and the members of the group, use the aaa group server command. For example, use the aaa group server command to first define the members of group ppprad : Configuring Authentication PPP Authentication Using AAA Configuring Authentication 5