Configuring Local Aaa Security - Cisco VGD-1T3 Software Configuration Manual

Basic Configuration Using the Command-Line Interface on the Cisco VGD 1T3 Voice Gateway
•

Configuring Local AAA Security

Configure authentication, authorization, and accounting (AAA) to perform login authentication by using
the local username database. The login keyword authenticates EXEC shell users. Additionally, configure
PPP authentication to use the local database if the session was not already authenticated by the login
keyword.
AAA (called triple A) is the Cisco IOS security model used on all Cisco devices. AAA provides the
primary framework through which you set up access control on the Cisco VGD 1T3 voice gateway.
The same authentication method is used on all interfaces. AAA is set up to use the local database
configured on the gateway. This local database is created with the username configuration commands.
Step 1 Create a local login username database in global configuration mode. In this example, the administrator's
username is admin. The remote client's login username is Harry.
Router(config)# username admin password adminpasshere
Router(config)# username Harry password Harrypasshere
This step also prevents you from getting locked out of the gateway. If you get locked out, you must reboot
Caution
the device and perform password recovery.
Step 2 Configure local AAA security in global configuration mode. You must enter the aaa new-model
command before the other two authentication commands.
Router(config)# aaa new-model
Router(config)# aaa authentication login default local
Router(config)# aaa authentication ppp default if-needed local
Table 1
!
version XX.X
.
.
!
hostname vgd1t3
!
enable secret 5 $1$60L4$X2JYOwoDc0.kqa1loO/w8/
.
Check the hostname and encrypted password displayed near the top of the command output.
Exit global configuration mode and attempt to log in using the new enable secret password. The
show privilege command shows the current security privilege level.
vgd1t3# exit
vgd1t3 con0 is now available
Press RETURN to get started.
vgd1t3> enable
Password:
vgd1t3# show privilege
Current privilege level is 15
vgd1t3#
explains the preceding configuration example.
Cisco VGD 1T3 Voice Gateway Software Configuration Guide

Configuring Local AAA Security

47