2008年10月7日 星期二

Cisco AAA authentication

aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication enable default none
aaa authorization config-commands
aaa authorization exec default group tacacs+ local
aaa authorization commands 15 default group tacacs+ local

aaa authorization configuration default group tacacs+
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+

tacacs-server host 192.168.1.29 key 7 06120C234D4002
tacacs-server host 192.168.90.18 key 7 1506080E052420
tacacs-server directed-request

沒有留言: