60-45
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 60 Router Device Administration
Console Policy Page
Field Reference
Console Page—Authorization Tab
Use the Authorization tab of the Console page to define the EXEC and command authorization methods
to perform on users who access the console port.
Note You must enable AAA services on the router to use this feature; otherwise, deployment will fail. See
Defining AAA Services, page 60-4.
Navigation Path
Go to the Console Policy Page, page 60-42, then click the Authorization tab.
Related Topics
• Console Page—Setup Tab, page 60-42
Table 60-17 Console Page—Authentication Tab
Element Description
Authenticate Using Authentication settings for the console port:
• None—Authentication is not performed. This is the default.
• Local Database—Uses the local username database for
authentication.
• AAA Policy Default List—Uses the default authentication method
list that is defined in the device’s AAA policy. See AAA
Page—Authentication Tab, page 60-6.
• Custom Method List—Uses the authentication methods specified
in the Authentication Method List field.
Note If you select local authentication, preview the full configuration
before deployment to make sure that the aaa new-model
command is not configured by another policy (for example, by
configuring a method list in the AAA policy) or is already
configured on the device itself.
Prioritized Method List Applies only when Custom Method List is selected as the
authentication method.
Defines a sequential list of methods to be queried when authenticating
a user. Enter the names of one or more AAA server group objects (up
to four), or click Select to select them. Use the up and down arrows in
the object selector to define the order in which the selected server
groups should be used. If the object that you want is not listed, click the
Create button to create it.
The device tries initially to authenticate users using the first method in
the list. If that method fails to respond, the device tries the next method,
and so on, until a response is received.
Note If you select None as a method, it must appear as the last
method in the list.