Running a router as TACACS server (Local AAA)

[wplaice]

Hi,

I'd like to be able run aaa on the secure part of my network, and I came across an article on Local AAA server (IOS Security Confiruration Guide, Release 12.4) that say I should be able to do just that..

I have a 2600 with c2600-ipbasek9-mz.124-8

I have tried to follow the example given, but that is not specifically for Tacacs authent. but when I configure tacacs on another device and do a sh tacacs the server (router) is not listening.

is there a simple guide as to how to use Local AAA in this way ?

can anyone start me off on this ?

very many thanks, Will

[a.kiprawih]

Hi Will,

AAA on router will refer to keyword 'local'.

You need to configure user in router local database. Normally, the aaa config guide will include tacacs+/radius as well, but you can always use 'local' as your aaa server source.

The following will use local database as default aaa source:

aaa authentication login default local

Same goes to authorization.

http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00805010dd.html#wp1001192

Rgds,

AK