AAA Authentication on Cisco IOS

[lagapidis (Lazarus Agapidis)]

Hello Samer

I’ll try to respond to each of your comments:

@sammiria801

! this is aaa Authentication password Prompt if the Tacacs Authentication if it’s failed (meaning with tacacs Authentication this is not showing)
aaa authentication password-prompt Backup_Authentication_Password:

Actually, the aaa authentication password-prompt command simply changes the text of the prompt when the password is to be input by the user. In this case, the text string “Backup_Authentication_Password” will be displayed for the user to enter the password. More info on this here: https://www.cisco.com/c/en/us/td/docs/ios/12_2/security/command/reference/fsecur_r/srfathen.html#wp1018042

@sammiria801

! this is aaa Authentication user Prompt if the Tacacs Authentication if it’s failed (meaning with tacacs Authentication this is not showing)
aaa authentication username-prompt Backup_Authentication_Username:

This defines the text of the prompt for the username in a similar manner as that shown above for the password. You can find more info here: https://www.cisco.com/c/en/us/td/docs/ios/12_2/security/command/reference/fsecur_r/srfathen.html#wp1018209

For the rest of the commands you are essentially correct. Take a look at the following links for clarification:

aaa authorization console: https://www.cisco.com/c/en/us/td/docs/ios/12_2/security/command/reference/fsecur_r/srfauth.html#wp1024046
aaa authorization config-commands: https://www.cisco.com/c/en/us/td/docs/ios/12_2/security/command/reference/fsecur_r/srfauth.html#wp1021814
aaa authorization commands: https://www.cisco.com/c/en/us/td/docs/ios/12_2/security/command/reference/fsecur_r/srfauth.html#wp1017390

@sammiria801

Also I have question in authorization server configuration what need to be done for each Authorization line to be working as expected?

Concerning this question, I’m not sure what you mean. Can you clarify?

I hope this has been helpful!

Laz