help me on AAA basics

From: imran ali <immrccie_at_gmail.com>
Date: Sun, 13 Feb 2011 20:04:43 +0300

Hi group ,

help me with the following aaa commands

1)aaa authentication login default group tacacs+ none

does it means if my tacacs server fails , the user will be authorized
immediately (no authorization done ) as the next method list is "none"

2) aaa authentication enable default group tacacs+ enable

does this means if tacacs server is unavailable or fails to respond locally
stored enable password will be used

3) if i issue this command " username admin password cisco " what will be
the privilege assigned to it .(by default)

4) aaa authorization exec default group tacacs+ if-authenticated
    a) plz explain what this do in general

    b) what happens if authentication is successful with tacacs server and i
have implemented command authorization to authorize all commands entered .
now imagine server goes down. will authorization be allowed or user will be
locked ?

i hope i m clear in asking

Thanks

Blogs and organic groups at http://www.ccie.net
Received on Sun Feb 13 2011 - 20:04:43 ART

This archive was generated by hypermail 2.2.0 : Tue Mar 01 2011 - 07:01:50 ART