Motorola BSR 2000, Configuration And Management Manual

Page: 105 / 650

Release 1.0 Configuring the System
526360-001-00 Rev. B MGBI 3-55
Use the ip tacacs source-interface loopback command, in Global Configuration
mode, to configure an Ethernet interface, as follows
MOT(config)#
ip tacacs source-interface loopback <
1-64
>
where:
1-64
is the loopback interface number
Enabling AAA
AAA is a network security model that consists of a software framework that provides
methods for authentication, authorization and accounting on the BSR. Use the
aaa
new-model command, in Global Configuration mode, to enable the AAA network
security model, as follows:
MOT
(config)#
aaa new-model
Configuring AAA Authentication
Configuring AAA authentication on the BSR involves the following tasks:
■
Configuring Login Authentication
■
Configuring Administrative Authentication
■
Configuring Local Authentication Through Local Override
Configuring Login Authentication
Configuring AAA login authentication establishes one or more login authentication
methods that determine if a user can login into the BSR. If multiple login
authentication methods are specified, the methods are invoked in the sequence that
they were specified.
Use the aaa authentication login default command, in Global Configuration mode,
to enable AAA authentication for login, as follows:
MOT
(config)#
aaa authentication login default { enable | local | none | radius |
tacacs }
where:
enable uses the enable password command setup as the authentication method.
local uses the local database as the authentication method.
none uses no method as the authentication method.
radius uses RADIUS as the authentication method.
tacacs uses as the authentication method.