The AAA Category

The AAA Category

The AAA Category accessible from the System Administration tab facilitates the

configuration of Cisco authentication, authorization, and accounting variables

through the AAA Server Groups,AAA Servers, and Auth. Prompt subcategories.

Click anniversary of these subcategories to appearance the options independent therein.Three

AAA server groups are predefined and arresting from the AAA Server Groups subcategory,

TACACS+, RADIUS, and LOCAL.These absence groups can be acclimated in

your configuration, or you can add new groups by beat the Add button.

New groups can be either RADIUS or TACACS+ based.

To add a new AAA server, baddest the AAA Server subcategory and click

Add.The Add AAA Server window appears, as apparent in Figure 9.34.

www.syngress.com

Figure 9.34 The Add AAA Server Window

492 Chapter 9 • PIX Device Manager

To add a new server, baddest either TACACS+ or RADIUS from the Server

Group pull-down list. Next, baddest the interface to be acclimated for AAA from the

Interface Name pull-down list. Finally, blazon the new AAA server abode in the

Server IP Abode field, baddest an affidavit key in the Key field, and

determine the AAA abeyance aeon in the Abeyance field.

The final AAA subcategory is Affidavit Prompt and is apparent in

Figure 9.35.

From the Affidavit Prompt subcategory, you can adapt the authentication

prompts displayed to the user during the login process.