Configuring AAA Authentication If a method-list is configured under VTY lines, the corresponding method list must be added to the AAA configuration: Device(config)# line vty 0 4 Device(config-line)# authorization commands 15 list1 Device(config-line)# exit Device(config)# aaa authorization commands 15 list1 group tacacs+ If a method-list is not configured under VTY lines, you must add the default method list to the AAA configuration: Device(config)# line vty 0 4 Device(config-line)# exit Device(config)# aaa authorization commands 15 default group tacacs+ Follow these steps to configure AAA authentication:
Procedure Web-Based Authentication Configuring AAA Authentication Command or Action Purpose Step 5 ip access-group name Example: Device(config-if)# ip access-group webauthag Applies the default ACL. Step 6 ip admission name Example: Device(config)# ip admission name Configures an authentication rule for web-based authorization for the interface. Step 7 exit Example: Device# exit Exits global configuration mode and returns to privileged EXEC mode. Step 8 show ip admission Example: Device# show ip admission Displays the network admission cache entries and information about web authentication sessions. Command or Action Purpose Step 1 enable Enables privileged EXEC mode.
Web-Based Authentication 13