Cisco Systems C819GUK9 Router User Manual


 
13-7
Cisco 819 Integrated Services Routers Software Configuration Guide
OL-23590-02
Chapter 13 Configuring a VPN Using Easy VPN and an IPSec Tunnel
Configuration Tasks
Enable Policy Lookup
Perform these steps to enable policy lookup through AAA, beginning in global configuration mode:
SUMMARY STEPS
1. aaa new-model
2. aaa authentication login {default | list-name} method1 [method2...]
3. aaa authorization {network | exec | commands level | reverse-access | configuration} {default |
list-name} [method1 [method2...]]
4. username name {nopassword | password password | password encryption-type
encrypted-password}
DETAILED STEPS
Command or Action Purpose
Step 1
aaa new-model
Example:
Router(config)# aaa new-model
Router(config)#
Enables the AAA access control model.
Step 2
aaa authentication login {default |
list-name} method1 [method2...]
Example:
Router(config)# aaa authentication login
rtr-remote local
Router(config)#
Specifies AAA authentication of selected users at
login, and specifies the method used.
This example uses a local authentication database.
You could also use a RADIUS server for this. For
details, see
Securing User Services Configuration
Guide Library, Cisco IOS Release 12.4T and Cisco
IOS Security Command Reference.
Step 3
aaa authorization {network | exec |
commands level | reverse-access |
configuration} {default | list-name}
[method1 [method2...]]
Example:
Router(config)# aaa authorization network
rtr-remote local
Router(config)#
Specifies AAA authorization of all
network-related service requests, including PPP,
and specifies the method of authorization.
This example uses a local authorization database.
You could also use a RADIUS server for this. For
details, see
Securing User Services Configuration
Guide Library, Cisco IOS Release 12.4T and Cisco
IOS Security Command Reference.
Step 4
username name {nopassword | password
password | password encryption-type
encrypted-password}
Example:
Router(config)# username Cisco password 0
Cisco
Router(config)#
Establishes a username-based authentication
system.
This example implements a username of Cisco
with an encrypted password of Cisco.