CISCO AAA Certified Configuration

Router (config) #aaa New-model enable AAA
Router (config) #aaa authentication attempts login 2 try to log in 2 times
Router (config) #aaa authentication fail-message C input wrong password error message
Enter TEXT message. End with the character ' C '.
Login invalid!
C
Router (config) #aaa authentication password-prompt logininvalid! AAA Authentication password Hint: logininvalid! (Enter the authentication password can be)
Router (config) #aaa authentication username-prompt PASSWD:AAA Authentication user name prompt is: passwd: (Enter the user name can be)
Router (config) #aaa Authentication login Local Local AAA Certified authentication method
*may 09:55:57.240:%aaaa-4-badmethname:bad authentication method-list Name "Local" (this was only a warning)
Router (config) #username ma password guangjie user name ma password Jie
Router (config) #line vty 0 4
Router (config-line) #login authentication Local login authentication as local (local is the name of the AAA login method)
Aaa:warning Authentication List "Local" is not defined for LOGIN.
Router (config-line) #transport input telnet only allows Telnet
Router (config-line) #privilege level 15 permission is 15 levels
Router (config) #access-list 1 Permit x.x.x.0 0.0.0.255 Defining a network segment
Router (config-line) #access-class 1 in Call

Many times we operate too fast and easy to operate error, remote disconnect, you can let the end multiplicity start, remote configuration do not rush to find Fast (disconnect do not want to go to other people where to run)

CISCO AAA Certified Configuration