.. _example_system_login_aaa_authentication_authentication:

##############
Authentication
##############


.. sidebar:: Contents

  .. contents::
    :depth: 2
    :local:

This scenario shows how to set up AAA authentication for
login/Telnet using different AAA methods.

************
Local Method
************

Description
===========

An AAA list with the local AAA method is created and
assigned to the login system's authentication. The device then
starts a Telnet session with itself to check that access is granted
when the correct username and password are used.

Scenario
========

.. include:: authentication/localmethod

.. raw:: html

  <hr>

*************
Radius Method
*************

Description
===========

A RADIUS server is added to a RADIUS group, which is
added to an AAA list. This list is assigned to the login system's
authentication. The device then starts a Telnet session with itself
to check that access is granted when the correct username and
password are used.

Scenario
========

.. include:: authentication/radiusmethod

.. raw:: html

  <hr>

*************
Tacacs Method
*************

Description
===========

A TACACS+ server is added to a TACACS+ group, which is
added to an AAA list. This list is assigned to the login system's
authentication. The device then starts a Telnet session with itself
to check that access is granted when the correct username and
password are used.

Scenario
========

.. include:: authentication/tacacsmethod

.. raw:: html

  <hr>

*******************************
Tacacs Method With Wrong Secret
*******************************

Description
===========

A TACACS+ server is added to a TACACS+ group, but said
server is configured with a wrong secret key. The TACACS+ group is
added to an AAA list, with local method as fallback.
After assigning this list to the login system's authentication, the
device starts a Telnet session with itself to check that access is
granted using the local method.

Scenario
========

.. include:: authentication/tacacsmethodwithwrongsecret

.. raw:: html

  <hr>