Lab sec-07 - AAA New-Model with Local Fallback

AAA - Authentication, Authorization, Accounting - is the framework that lets centralized servers (TACACS+ or RADIUS) handle login validation, command authorization, and command-logging across all your network devices. The local user database becomes a fallback if AAA servers are unreachable. This lab configures AAA new-model on R1 with the local database as the primary method (we focus on AAA mechanics; lab sec-08 covers RADIUS-based authentication).

What you will learn

• The AAA new-model configuration framework
• The four AAA methods: local, group radius, group tacacs+, none, line
• How to define named method lists for vty and console
• The fallback chain: try first method; if unreachable, try next

What this lab does NOT cover

• External TACACS+ or RADIUS server setup (out of scope for CML Free)
• AAA accounting in depth
• Per-command authorization (privilege levels)

Topology