AAA Authentication

elegua

Hi Guys,

Is this configuration correct?, what i want is that every user that try to connect to my router using SSH, authenticate local using AAA, is this correct or do i need something more?.

aaa new-model
aaa authentication login default local
!
!
username XXXXX privilege 15 secret XXXXX
username XXXXX privilege 1 secret XXXXX
!
!
line vty 0 4
 login authentication default
 transport preferred ssh

Thanks in advance.

nice343

looks about right

jabb000

Looks good to go to me...............

dtlokee

no need to use "aaa new-model" if you don't want to in this case, but you need to change the "transport preferred ssh" to "transport input ssh" otherwide the router will think you want ssh to be the preferred outgoing protocol when connecting to other devices, but will still accept incomming telnet connections

hostname Router1
ip domain-name example.com
ip ssh version 2
crypto key generate rsa

username bob secret cisco

line vty 0 4
login local
transport input ssh

mgeorge

Change:
login authentication default

To
login local

when you use login authentication "default"

you are referencing the default AAA configuration for a TACACS+ or RADIUS authentication
mechninism.