Steps to Configure AAA

Configuring AAA is relatively simple once the basic process is understood. The basic steps to configure AAA security on a Cisco router or access server are as follows:

1. Enable AAA by using the aaa new-model global configuration command.

2. If you decide to use a separate security server, such as RADIUS, TACACS+, or Kerberos, configure security protocol parameters to use the appropriate server(s).

3. Define the method lists for authentication by using an aaa authentication command.

4. Apply the method lists to a particular interface or line, if required.

5. (Optional) Configure authorization using the aaa authorization command.

6. (Optional) Configure accounting using the aaa accounting command.

You will look at Steps 3 and 4 in this section.