Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

AAA setup on 4509

I've been asked to place the appropriate commands in my 4509 to allow access for TACAC, but none of the commands are working.  Some of them I can't even find in the IOS.  Need help.

authorization commands 15 ENT

accounting commands 15 ENT

login authentication ENT

Jonathan,

4 REPLIES
Cisco Employee

Re: AAA setup on 4509

Do you mean

aaa authentication...

aaa authorization commands 15 ENT

aaa accounting commands 15 ENT

Make sure you do "aaa new-model" before you try to use aaa commands.

I hope it helps.

PK

Silver

Re: AAA setup on 4509

Hi Jonathan,

Are you running IOS or CATOS on the 4509?

Which release?

Are you trying to configure login authentication using Tacacs server?

Cheers

Marco

Community Member

Re: AAA setup on 4509

I am running regular IOS.

Silver

Re: AAA setup on 4509

You can find many configuration guides on Cisco website, for AAA on IOS, for example:

http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfathen.html

In your case, a basic configuration will be:

aaa new-model

aaa authentication login default group tacacs+ local

aaa authorization exec default group tacacs+ local

tacacs-server host x.x.x.x key yyyyy

The "local" keyword means that if the Tacacs server does not reply or it's misconfigured, you can use the local database to authenticate. In this way, if the tacacs server is down, you can still access the switch.

You can add users to the local database with the command "username .... password ...."

Cheers

Marco

457
Views
8
Helpful
4
Replies
CreatePlease to create content