Cisco Systems AS5400XM quick start Configuring Local AAA Security

!

hostname Gateway

!

enable secret 5 $1$60L4$X2JYOwoDc0.kqa1loO/w8/

.

.

.

Step 2 Exit privileged EXEC mode and attempt to log in by using the new enable secret password. The show privilege command shows the current security privilege level.

Gateway# exit

Gateway con0 is now available

Press RETURN to get started.

Gateway> enable

Password:

Gateway# show privilege

Current privilege level is 15

Gateway#

Configuring Local AAA Security

Configure authentication, authorization, and accounting (AAA) to perform login authentication by using the local username database. The login keyword authenticates EXEC shell users. Additionally, configure PPP authentication to use the local database if the session was not already authenticated by the login command.

AAA(called triple A) is the Cisco IOS security model used on all Cisco devices. AAA provides the primary framework through which you set up access control on the Cisco AS5350XM or Cisco AS5400XM universal gateway.

The same authentication method is used on all interfaces. AAA is set up to use the local database configured on the gateway. This local database is created with the username configuration commands.

To configure AAA, follow these steps:

Step 1 Enter global configuration mode. You are in global configuration mode when your prompt changes to Gateway(config)#.

Gateway# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Gateway(config)#

Step 2 Create a local login username database in global configuration mode. In this example, the administrator’s username is admin. The remote client’s login username is Harry.

Gateway(config)# username admin password adminpasshere

Gateway(config)# username Harry password Harrypasshere

Step 3 Configure local AAA security in global configuration mode. You must enter the aaa new-modelcommand before the other two authentication commands.

Gateway(config)# aaa new-model

Gateway(config)# aaa authentication login default local

Gateway(config)# aaa authentication ppp default if-needed local

Step 4 Return to privileged EXEC mode:

Gateway(config)# Ctrl-Z

Gateway#

Step 5 Log in with your username and password.

38