Total Access 5000 Business Services Deployment Guide
3-22 65K510DEP08-1A
Themethodsgroup radius,group tacacs+,andlocalarealloptional,
butatleastonemethodmustbespecified.Onlythemethodslistedareused.
Authentication Examples
ThefollowingexampleenablesTACACS+andlocalauthentication,butdisablesRADIUS
authentication.
TA5000#configure terminal
TA5000(config)#aaa authentication login default group tacacs+ local
TA5000(config)#exit
TA5000#
Thefollowingexampleonlyenableslocalauthentication,disablingallremoteauthentication
methods.
TA5000#configure terminal
TA5000(config)#aaa authentication login default local
TA5000(config)#exit
TA5000#
Configure TACACS+ Authorization
Ifper‐commandauthorizationisenabledforagroupofcommands,theTotalAccess5000
connectswiththeTACACS+ servereachtimeacommandisenteredtoverifythattheuserhas
permissiontoexecutethecommand.
TA CACS+authorizationonlyoccurswhenTACACS+authenticationisused.
Commandsaregroupedasfollows:
• Level0commands:Theonlylevel0commandsare
enable,disable,end,exit,and
logoff.Thesecommandsarenotsubjecttoremotecommandauthorization.
• Level1commands:AllcommandsthatarenativetotheRootprompt(priortothe
enable
commandbeingissued)areLevel1commands.Theseincludemostshowcommands.
• Level15commands:AllremainingcommandsnotdesignatedasLevel0orLevel1.This
includesallapplicationcommands,allcommandsnativetotheEnableprompt(notalso
presentattheRootpromptpriortothe
enablecommandbeingused),andallcommands
atandbeyondtheGlobalConfigurationprompt.
• Level15configurationcommands:ThesecommandsareatorbeyondtheGlobal
Configurationprompt.
Toconfiguretheauthorizationforalevel,completethefollowingprocedure:
1. FromtheEnableprompt,type
configure terminal,andpressENTERtoaccesstheGlo‐
balConfigurationprompt.
2. FromtheGlobalConfigurationprompt,type
aaa authorization commands <1,15>
default group tacacs+
,andpressENTERtoenableTACACS+authorization fora
commandlevel.