Below shows the required configuration commands for configuring AAA.
Table of Contents
Authentication
Interactive user
#(config) aaa-server <server name> protocol <tacacs/radius>
#(config) aaa-server <server name> <interface> host <AAA server IP>
#(config) aaa authentication include <https/https/ftp/telnet> inbound 0 0 0 0
#(config) access-list 111 permit tcp any any eq ftp
#(config) aaa authentication match 111 <interface> <AAA server name>
Console Access
#(config) aaa authentication http/enable/serial/telnet/ssh console <aaa server>
#(config) Timeout uauth 3:00 absolute
#(config) Timeout uauth 0:30 inactivity
Authorisation
#(config) access-list 113 permit tcp any any eq ftp
#(config) aaa authorisation match 113 <interface> <aaa server>
This will authorise only tcp ports 1-444 inbound from anywhere to anywhere
#(config)#aaa authorisation include tcp/1-444 inbound 0 0 0 0 <server name>
Accounting
#(config)aaa accounting match <acl> <interface> <aaa server>
- NETCONF & YANG: Automate Network Configs via Python - April 2, 2026
- Palo Alto – How to Configure Your Next-Generation Firewall - April 2, 2026
- How to Harden Linux SSH: Keys, Fail2ban & Ciphers - March 1, 2026
Want to become an IT Security expert ?
Here is our hand-picked selection of the best courses you can find online:
Internet Security Deep Dive course
Complete Cyber Security Course – Hackers Exposed
CompTIA Security+ (SY0-601) Certification Complete course
and our recommended certification practice exams:
Delta Practice Tests