329
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Chapter Administering the Wireless Device
Configuring the Access Point for Local Authentication and Authorization
8.
show running-config
9.
copy running-config startup-config
DETAILED STEPS
To disable AAA, use the
no aaa new-model
command in global configuration mode. To disable
authorization, use the
no aaa authorization
{
network
|
exec
}
method1
command in global
configuration mode.
Command
Purpose
Step 1
configure terminal
Enters global configuration mode.
Step 2
aaa new-model
Enables AAA.
Step 3
aaa authentication login default local
Sets the login authentication to use the local username database. The
default
keyword applies the local user database authentication to all
interfaces.
Step 4
aaa authorization exec local
Configures user AAA authorization to determine whether the user is
allowed to run an EXEC shell by checking the local database.
Step 5
aaa authorization network local
Configures user AAA authorization for all network-related service
requests.
Step 6
username
name
[
privilege
level
]
{
password
encryption-type
password
}
Enters the local database, and establishes a username-based
authentication system.
Repeat this command for each user.
•
For
name
, specify the user ID as one word. Spaces and quotation
marks are not allowed.
•
(Optional) For
level
, specify the privilege level that the user has after
gaining access. The range is 0 to 15. Level 15 gives privileged EXEC
mode access. Level 0 gives user EXEC mode access.
•
For
encryption-type
, enter
0
to specify that an unencrypted password
follows. Enter
7
to specify that a hidden password follows.
•
For
password
, specify the password that the user must enter to gain
access to the wireless device. The password must be from 1 to 25
characters long, can contain embedded spaces, and must be the last
option specified in the
username
command.
Note
The characters TAB, ?, $, +, and [ are invalid characters for
passwords.
Step 7
end
Returns to privileged EXEC mode.
Step 8
show running-config
Verifies your entries.
Step 9
copy running-config startup-config
(Optional) Saves your entries in the configuration file.