Cisco 7200 Router Simple AAA experiment

650) this.width=650; "src=" Http://s2.51cto.com/wyfs02/M00/8A/B9/wKiom1g4903CKOQdAABGAuHRaZQ582.png "title=" Screenshot.png "alt=" Wkiom1g4903ckoqdaabgauhrazq582.png "/>

！ Configure local user name and password

R1 (config) #username hello privilege secret 0 World

！ Account Opening AAA

R1 (config) #aaa New-model

！ Specifies that ACS is the TACACS server address-----old syntax

R1 (config) #tacacs-server host 192.168.11.56 key cisco123

！ New syntax

R1 (config) #tacacs server vmacs56

R1 (config-server-tacacs) #address IPv4 192.168.11.56

R1 (config-server-tacacs) #key cisco123

！ Configuring AAA Server Groups

R1 (config) #aaa Group Server TACACS + mygroup1

R1 (config-sg-tacacs+) #server 192.168.11.56

！ Configure a list of authentication and authorization methods

R1 (config) #aaa authentication login myauthenlist Group Mygroup1 Local

R1 (config) #aaa authorization exec myauthorlist Group Mygroup1 Local

！ Specify authentication and authorization under the Vty line

R1 (config) #line vty 0 4

R1 (config-line) #login authentication myauthenlist

R1 (config-line) #authorization exec myauthorlist

！ Test

R1#test AAA Group Mygroup1 111 123456 Legacy

Attempting authentication test to Server-group mygroup1 using TACACS +

User was successfully authenticated.

Cisco 7200 Router Simple AAA experiment