Filter
Top Products
60-41
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 60 Router Device Administration
Line Access on Cisco IOS Routers
• (Policy view) Select Router Platform > Device Admin > Device Access > Line Access > VTY
from the Policy Type selector. Select an existing policy or create a new one.
The VTY page is displayed. See Table 60-20 on page 60-50 for a description of the fields on this page.
Step 2 Select a VTY line definition in the Lines tables, click the Edit button to display the VTY Line dialog
box, then click the Authentication tab.
Step 3 (Optional) Select the authentication method to perform on users who attempt to access the VTY line.
See Table 60-23 on page 60-55 for a description of the fields on this tab.
Note If you select local authentication, preview the full configuration before deployment to make sure
that the aaa new-model command is not configured by another policy (for example, by
configuring a method list in the AAA policy) or is already configured on the device itself.
Step 4 (Optional) On the Authorization tab, select the authorization method to perform on users who access the
VTY line and begin an EXEC session.
See Table 60-24 on page 60-56 for a description of the fields on the Authorization tab.
Note RADIUS uses the same server for authentication and authorization. Therefore, if you use define
a RADIUS method list for authentication, you must define the same method list for
authorization.
Step 5 (Optional) Create command authorization definitions for specific privilege levels:
a. Click the Add button under the Commands Authorization table. The Command Authorization
Dialog Box—Line Access, page 60-60 is displayed.
b. Configure the command authorization definition as required.
c. Click OK. The dialog box closes and the authorization method is displayed in the Commands
Authorization table.
d. Repeat a. through c. to create additional command authorization definitions.
Step 6 (Optional) On the Accounting tab, select the EXEC and connection accounting methods to perform on
users who attempt to access the VTY line.
See Table 60-25 on page 60-58 for a description of the fields on the Accounting tab.
Step 7 (Optional) Create command accounting definitions for specific privilege levels:
a. Click the Add button under the Commands Accounting table. The Command Accounting Dialog
Box—Line Access, page 60-61 is displayed.
b. Configure the command accounting definition as required.
c. Click OK. The dialog box closes and the accounting method is displayed in the Commands
Accounting table.
d. Repeat a. through c. to create additional command accounting definitions.