Cisco Catalyst 2960-XR - Page 104

SUMMARY STEPS
1.
configure terminal
2.
aaa new-model
3.
aaa authentication login default local
4.
aaa authorization exec local
5.
aaa authorization network local
6.
username name [privilege level] {password encryption-type password}
7.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Enables AAA.aaa new-model
Example:
Switch(config)# aaa new-model
Step 2
Sets the login authentication to use the local username database. The
default keyword applies the local user database authentication to all
ports.
aaa authentication login default local
Example:
Switch(config)# aaa authentication login
Step 3
default local
Configures user AAA authorization, check the local database, and
allow the user to run an EXEC shell.
aaa authorization exec local
Example:
Switch(config)# aaa authorization exec
Step 4
local
Configures user AAA authorization for all network-related service
requests.
aaa authorization network local
Example:
Switch(config)# aaa authorization
Step 5
network local
Enters the local database, and establishes a username-based
authentication system.
username name [privilege level] {password
encryption-type password}
Step 6
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
82 OL-29434-01
Configuring Local Authentication and Authorization
Configuring the Switch for Local Authentication and Authorization