Web-Based Authentication Configuring AAA Authentication Command or Action Purpose Example: Device> enable • Enter your password if prompted. Step 2 configure terminal Example: Device# configure terminal Enters global configuration mode. Step 3 aaa new-model Example: Device(config)# aaa new-model Enables AAA functionality. Step 4 aaa authentication login default group {tacacs+ | radius} Example: Device(config)# aaa authentication login default group tacacs+ Defines the list of authentication methods at login. named authentication list refers to any name _ _ that is not greater than 31 characters. AAA group name refers to the server group _ _ name.
You need to define the server-group server name at the beginning itself. _ Step 5 aaa authorization auth-proxy default group {tacacs+ | radius} Example: Device(config)# aaa authorization auth-proxy default group tacacs+ Creates an authorization method list for web-based authorization. Step 6 tacacs server server-name Example: Device(config)# tacacs server yourserver Specifies an AAA server. Step 7 address {ipv4 | ipv6} ip address Example: Device(config-server-tacacs)# address ipv4 10.0.1.12 Configures the IP address for the TACACS server. Web-Based Authentication 14