Comparison with the Lock-and-Key Feature

Triggers on HTTP connection requests.

Triggers on Telnet connection requests.

TACACS+ or RADIUS authentication and authorization.

TACACS+, RADIUS, or local authentication.

Access list entries are created from profile information retrieved from the AAA server only.

Access lists are configured on the router only.

Access privileges are granted on a per-user and host IP address basis.

Access privileges are granted on the basis of the user’s host IP address only.

ACLs can have multiple entries defined by the user profiles on the AAA server.

Access lists are limited to one entry for each host IP address.

Allows DHCP-based host IP addresses, meaning users can log in from any host location and obtain authentication and authorization.

Associates a fixed IP address with a specific user. Users must log in from the host with that IP address.