Solved

AAA question

Posted on 2006-10-22
2
369 Views
Last Modified: 2010-04-17
can someone tell me what the following means (I'm looking for a breakdown of each part):

aaa authentication login default group tacacs+       (can someone breakdown this for me? Is tacacs+ a group name?)
aaa authorization network default group tacacs+    (same question as above. Is tacacs+ a group name)
aaa accounting exec default start-stop group tacacs+ (what does everything after "exec" mean?)



thanks
0
Comment
Question by:dissolved
2 Comments
 
LVL 12

Accepted Solution

by:
pjtemplin earned 500 total points
ID: 17786168
aaa authentication login default group tacacs+

This requires users logging into the router, on all lines that do not have a non-default authentication group assigned, to validate their identity, checked against the group of tacacs+ servers listed later in the config.

aaa authorization network default group tacacs+

This requires PPP, SLIP, and ARAP connections to get authorization from the tacacs+ servers listed later in the config.

aaa accounting exec default start-stop group tacacs+

This tracks the activity of user EXEC sessions to the tacacs+ server group.

See http://tinyurl.com/6tnks for further information.
0
 

Author Comment

by:dissolved
ID: 17786229
hey thanks me.
So what does the "group" denote?
I'm assuming "tacacs+" denotes that we will be using TACACS+ as opposed to RADIUS?

Thanks
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now