AAA Basic (二)

fum1(config)#aaa new-model
fum1(config)#tacacs-server host 192.168.1.4
fum1(config)#tacacs-server key seattle19
fum1(config)#aaa authentication login XYZ-access group tacacs+ enable none
fum1(config)#aaa authentication ppp PPP-access group tacacs+ none
fum1(config)#aaa authorization network xyz-auth group tacacs+ local
fum1(config)#aaa accounting network xyz-acct group start-stop tacacs+
fum1(config)#interface serial 0/1
fum1(config-if)#encapsulation ppp
fum1(config-if)#ppp authentication ppp-access
fum1(config-if)#ppp authorization xyz-auth
fum1(config-if)#ppp accounting xyz-acct

show tacacs: To verify network connectivity between NAS and AAA serverdebug condition user username: Sets conditional debugging for a specific user and generates
output debugs related to the user
debug aaa authentication: Displays authentication information with TACACS+ and
RADIUS client/server interaction
debug aaa authorization: Displays authorization information with TACACS+ and RADIUS
client/server interaction
debug aaa accounting: Displays accounting information with TACACS+ and RADIUS
client/server interaction
debug tacacs: Displays TACACS+ interaction between the IOS client and the
AAA server
debug radius: Displays RADIUS interaction between the IOS client and the
AAA server
debug ppp negotiation: Shows if a client is passing PPP negotiation
debug ppp authentication: Shows if a client is passing PPP authentication
debug ppp error: Displays protocol errors and error statistics associated with PPP
connection negotiation and operation