Basic Configuration Using the Command-Line Interface
Configuring Local AAA Security
4
Cisco AS5350XM and Cisco AS5400XM Universal Gateways Software Configuration Guide
AAA (called triple A) is the Cisco IOS security model used on all Cisco devices. AAA provides the
primary framework through which you set up access control on the Cisco AS5350XM or
Cisco AS5400XM universal gateway.
The same authentication method is used on all interfaces. AAA is set up to use the local database
configured on the gateway. This local database is created with the
username
configuration commands.
Step 1
Create a local login username database in global configuration mode. In this example, the administrator's
username is
admin
. The remote client’s login username is
Harry
.
AS5400(config)#
username admin password adminpasshere
AS5400(config)#
username Harry password Harrypasshere
Caution
This step also prevents you from getting locked out of the gateway. If you get locked out, you must reboot
the device and perform password recovery.
Step 2
Configure local AAA security in global configuration mode. You
must
enter the
aaa new-model
command before the other two authentication commands.
AS5400(config)#
aaa new-model
AS5400(config)#
aaa authentication login default local
AS5400(config)#
aaa authentication ppp default if-needed local
Table 3
explains the preceding configuration example.
Step 3
Log in with your username and password:
AS5400#
login
User Access Verification
Username:
admin
Password:
AS5400#
A successful login means that your local username works on any TTY or VTY line. Do not disconnect
your session until you can log in.
Table 3
Local AAA Commands
Command
Purpose
AS5400(config)#
aaa new-model
Initiates the AAA access control system. This
command immediately locks down login and PPP
authentication.
AS5400(config)#
aaa authentication login
default local
Configures AAA to perform login authentication
by using the local username database. The
login
keyword authenticates EXEC shell users.
AS5400(config)#
aaa authentication ppp
default if-needed local
Configures PPP authentication to use the local
database if the session was not already
authenticated by the
login
keyword.