AAA Method Commands
16-106 Configuring Security

client

ThiscommandconfiguresthedefaultAAAmethod(plugin)foreachclientservice.Ifaclient
serviceisnotregisteredbythiscommand,requestsfromthatservicewillfallthroughtothe
overalldefaultmethod.
Forexample,iftheauthenticationmodehasnotbeensetforTelnetusingaaa client telnet,
thenthedefaultAAAmethodsetforTelnetusersviatheclientcommandwillbeignored.Telnet
userswillbeauthenticatedbyTelnetsAAAschemeusingitsownuserdatabase.
Syntax
client {vpn | telnet | firewall | console | ssh | ppp}
Syntax of the No Form
Thenoformofthiscommandremovesthedefaultmethodfortheassociatedclientservice:
no client {vpn | telnet | firewall | console | ssh | ppp}
Mode
AAAMethodconfiguration:XSR(aaa-method-xx)#
Default
VPNaccessisenabled,allotheraccesstypesaredisabled.
Example
ThisexampleconfiguresRADIUSmethodsbrasthedefaultmethodfortheclientserviceTelnet:
XSR(config)#aaa method radius sbr
XSR(config-aaa-rad)#client telnet

enable

ThiscommandenablesthecurrentAAAserverforRADIUSonly.
Syntax
enable
Syntax of the “no” Form
ThenoformofthiscommanddisablesthecurrentAAAserverservice:
no enable
Note: You can specify a username as username@method, allowing that user to explicitly specify
which AAA method to use for that login attempt.
Note: PPP uses AAA only when acting as the authenticator (that is, when validating the peer).
PPP's client-side functionality is authenticated by the peer when acting as the authenicatee.