Related Topics
TACACS+ Configuration Options, on page 42
Configuring TACACS+ Login Authentication
Beginning in privileged EXEC mode, follow these steps to configure TACACS+ login authentication:
Before You Begin
To configure AAA authentication, you define a named list of authentication methods and then apply that list
to various ports.
To secure the switch for HTTP access by using AAA methods, you must configure the switch with the ip
http authentication aaa global configuration command. Configuring AAA authentication does not secure
the switch for HTTP access by using AAA methods.
Note
For more information about the ip http authentication command, see the Cisco IOS Security Command
Reference, Release 12.4.
SUMMARY STEPS
1.
configure terminal
2.
aaa new-model
3.
aaa authentication login {default | list-name} method1 [method2...]
4.
line [console | tty | vty] line-number [ending-line-number]
5.
login authentication {default | list-name}
6.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Enables AAA.aaa new-model
Example:
Switch(config)# aaa new-model
Step 2
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 45
Configuring TACACS+
Configuring TACACS+ Login Authentication