Cisco Catalyst 2960-X - Page 398

SUMMARY STEPS
1.
enable
2.
configure terminal
3.
aaa new-model
4.
aaa authentication login default group {tacacs+ | radius}
5.
aaa authorization auth-proxy default group {tacacs+ | radius}
6.
tacacs-server host {hostname | ip_address}
7.
tacacs-server key {key-data}
8.
end
9.
show running-config
10.
copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode. Enter your
password if prompted.
enable
Example:
Switch> enable
Step 1
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 2
Enables AAA functionality.aaa new-model
Example:
Switch(config)# aaa new-model
Step 3
Defines the list of authentication methods at login.aaa authentication login default group {tacacs+ | radius}
Example:
Switch(config)# aaa authentication login default
Step 4
group tacacs+
Creates an authorization method list for web-based
authorization.
aaa authorization auth-proxy default group {tacacs+ |
radius}
Example:
Switch(config)# aaa authorization auth-proxy default
Step 5
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
374 OL-29048-01
Configuring Web-Based Authentication
Configuring AAA Authentication