Você está na página 1de 1

aaa new-model

tacasc-server host 10.10.10.10 key cisco


aaa authentication login default group tacacs+ local

aaa authentication login Amit group tacacs+ local (name of authentication policy)
line vty 0 4
login authentication Amit

For aaa Authetication has 3 steps process


Step 1 enable the service
Step 2 define authetication rule
Step 3 Define location of AAA server.

Authorization,

aaa authorization exec cisco group tacacs+ (exec means CLI)


line vty 0 4
authorization exec cisco

define the previlage level


aaa authorization command 0 default group tacacs+
aaa authorization command 1 default group tacacs+
aaa authorization command 15 default group tacacs+

OR
named authrization
aaa authorization command 0 CCIE group tacacs+
aaa authorization command 1 CCIE group tacacs+
aaa authorization command 15 CCIE group tacacs+

line vty 0 4
authorization command 0 CCIE
authorization command 1 CCIE
authorization command 15 CCIE

Você também pode gostar