AAA - Authentication, Authorization, Accounting - is the framework that lets centralized servers (TACACS+ or RADIUS) handle login validation, command authorization, and command-logging across all your network devices. The local user database becomes a fallback if AAA servers are unreachable. This lab configures AAA new-model on R1 with the local database as the primary method (we focus on AAA mechanics; lab sec-08 covers RADIUS-based authentication).
What you will learn
- The AAA new-model configuration framework
- The four AAA methods: local, group radius, group tacacs+, none, line
- How to define named method lists for vty and console
- The fallback chain: try first method; if unreachable, try next
What this lab does NOT cover
- External TACACS+ or RADIUS server setup (out of scope for CML Free)
- AAA accounting in depth
- Per-command authorization (privilege levels)
Topology
Download the CCNA Base Topology .yaml
3 iol-xe routers + 1 alpine + 1 ioll2-xe managed switch.
