Restricting Router Access

[angel-moon]

Hello everyone,

on a 2811 router I would like to have any user get prompted for a username and password for console, vty, aux, ssh and any other management connectivity. How do I make that happen?

All replies rated. Thanks in advance!

[Collin Clark · Accepted solution]

You'll want to use AAA. You can use the local database if you don't have an external AAA server.

First create local username/passwords.

username MMessier password RaNgErS

Next we enable AAA.

aaa new-model

Next we tell AAA to use the local database of users.

aaa authentication login default local

Next we set the VTY and console lines to use AAA

line vty 0 15

login authentication default

line con 0

login authentication default

Hope that helps.