topic AAA setup on 4509 in Network Access Control

AAA setup on 4509

Jonathancert_2 — Mon, 11 Mar 2019 00:31:07 GMT

I've been asked to place the appropriate commands in my 4509 to allow access for TACAC, but none of the commands are working. Some of them I can't even find in the IOS. Need help.

authorization commands 15 ENT

accounting commands 15 ENT

Jonathan,

Re: AAA setup on 4509

Panos Kampanakis — Fri, 22 Oct 2010 19:22:12 GMT

Do you mean

aaa authentication...

aaa authorization commands 15 ENT

aaa accounting commands 15 ENT

Make sure you do "aaa new-model" before you try to use aaa commands.

I hope it helps.

Re: AAA setup on 4509

mavespig — Sat, 23 Oct 2010 07:41:37 GMT

Hi Jonathan,

Are you running IOS or CATOS on the 4509?

Which release?

Are you trying to configure login authentication using Tacacs server?

Cheers

Marco

Re: AAA setup on 4509

Jonathancert_2 — Sat, 23 Oct 2010 16:11:22 GMT

I am running regular IOS.

Re: AAA setup on 4509

mavespig — Mon, 25 Oct 2010 06:21:19 GMT

You can find many configuration guides on Cisco website, for AAA on IOS, for example:

http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfathen.html

In your case, a basic configuration will be:

aaa new-model

aaa authentication login default group tacacs+ local

aaa authorization exec default group tacacs+ local

tacacs-server host x.x.x.x key yyyyy

The "local" keyword means that if the Tacacs server does not reply or it's misconfigured, you can use the local database to authenticate. In this way, if the tacacs server is down, you can still access the switch.

You can add users to the local database with the command "username .... password ...."

Cheers

Marco