Cisco AS5350XM Configuration Manual page 64

Configuring Local AAA Security
AAA (called triple A) is the Cisco IOS security model used on all Cisco devices. AAA provides the
primary framework through which you set up access control on the Cisco AS5350XM or
Cisco AS5400XM universal gateway.
The same authentication method is used on all interfaces. AAA is set up to use the local database
configured on the gateway. This local database is created with the username configuration commands.
Create a local login username database in global configuration mode. In this example, the administrator's
Step 1
username is admin. The remote client's login username is Harry.
AS5400(config)# username admin password adminpasshere
AS5400(config)# username Harry password Harrypasshere
This step also prevents you from getting locked out of the gateway. If you get locked out, you must reboot
Caution
the device and perform password recovery.
Configure local AAA security in global configuration mode. You must enter the aaa new-model
Step 2
command before the other two authentication commands.
AS5400(config)# aaa new-model
AS5400(config)# aaa authentication login default local
AS5400(config)# aaa authentication ppp default if-needed local
Table 3 explains the preceding configuration example.
Table 3
Command
AS5400(config)# aaa new-model
AS5400(config)# aaa authentication login
default local
AS5400(config)# aaa authentication ppp
default if-needed local
Log in with your username and password:
Step 3
AS5400# login
User Access Verification
Username: admin
Password:
AS5400#
A successful login means that your local username works on any TTY or VTY line. Do not disconnect
your session until you can log in.
Cisco AS5350XM and Cisco AS5400XM Universal Gateways Software Configuration Guide
4
Local AAA Commands
Basic Configuration Using the Command-Line Interface
Purpose
Initiates the AAA access control system. This
command immediately locks down login and PPP
authentication.
Configures AAA to perform login authentication
by using the local username database. The login
keyword authenticates EXEC shell users.
Configures PPP authentication to use the local
database if the session was not already
authenticated by the login keyword.