AAA per user

[penoberger]

Hello,

I need someone to clarify me the concept of "AAA per user".(for debugging

purposes)

Does this mean that can configure

on AAA a user profile with IP and

general L3 info for specific user?

Which the difference with simple

AAA authentication/authorization

for a user?

Any help will be really appreciated.

Thanks in advance.

[globalnettech]

Hello Peter,

with per-user AAA, you can configure any valid AV pair for a single user. The valid AV pairs depend on the software you are using. I guess that simple AAA authentication and authorization uses only the most common attributes...

Have a look at this link for possible AV pair values (this if for Cisco TACACS+):

TACACS+ AV Pairs

http://doc.trecom.tomsk.su/cisco/cc/td/doc/product/access/acs_soft/csacs4nt/csnt30/user/ac.htm#xtocid115352

And this document explains the configuratuion options for the Freeware TACACS/CiscoSecure TACACS/RADIUS Server:

AAA Server Configuration for a Per-User Configuration Solution

http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps1828/products_configuration_guide_chapter09186a008008725f.html

HTH,

GNT