AAA can be implemented in two forms: either locally on a device or with TACACS+ or RADIUS.
Implementing Cisco AAA - authentication
Implementing authentication using local services
In this section, we going to take look at implementing authentication on the Cisco IOS router. This feature will enable the router to act as an authentication server with all of the user accounts that are created and stored on the device itself:
Whenever a user tries to log in, the router will query the local database to validate if the username and password combination exists and is accurate. If yes, this proves to the router that the user has validated their identity and is who they say they are.
The following are the steps to enable AAA using...