NASI Authentication Using Group TACACS Use the aaa authentication nasi command with the group tacacs+ keyword to specify TACACS+ as the NASI authentication method. For example, to specify TACACS+ as the method of NASI user authentication when no other method list has been defined, enter the following command: Device(config)# aaa authentication nasi default group tacacs+ Before you can use TACACS+ as the authentication method, you need to enable communication with the TACACS+ security server. NASI Authentication Using Line Password Use the aaa authentication nasi command with the keyword line to specify the line password as the authentication method.
For example, to specify the line password as the method of NASI user authentication when no other method list has been defined, enter the following command: Device(config)# aaa authentication nasi default line Before you can use a line password as the NASI authentication method, you need to define a line password. NASI Authentication Using Local Password Use the aaa authentication nasi command with the keyword local to specify that the Cisco rdevice will use the local username database for authentication information. For example, to specify the local username database as the method of NASI user authentication when no other method list has been defined, enter the following command:
Device(config)# aaa authentication nasi default local NASI Authentication Using Group Name Use the aaa authentication nasi command with the group group-name method to specify a subset of RADIUS or TACACS+ servers to use as the NASI authentication method. To specify and define the group name and the members of the group, use the aaa group server command. For example, use the aaa group server command to first define the members of group nasirad :
Device> enable Device# configure terminal Device(config)# aaa group server radius nasirad Device(config-sg-radius)# server 172.16.2.3 Device(config-sg-radius)# server 172.16.2 17 Device(config-sg-radius)# server 172.16.2.32 Device(config-sg-radius)# end This command specifies RADIUS servers 172.16.2.3, 172.16.2.17, and 172.16.2.32 as members of the group nasirad . To specify group nasirad as the method of user authentication at login when no other method list has been defined, enter the following command:
Device(config)# aaa authentication nasi default group nasirad Before you can use a group name as the NASI authentication method, you need to enable communication with the RADIUS or TACACS+ security server. Configuring Authentication NASI Authentication Using Group TACACS Configuring Authentication 9