CCNP Security Identity Management SISE 300-715 Official Cert Guide

Chapter 25

Configuring Device Administration AAA with Cisco IOS

This chapter covers the following topics:

• Configuring network access devices

• Configuring policies, including authentication and authorization profiles

• Compare AAA protocols

• Configure TACACS+ device administration and command authorization

Chapter 24, “Device Administration AAA with ISE,” explains how Cisco ISE is a policy server that provides authentication, authorization, and accounting (AAA) for the purpose of access control and device administration.

This chapter explores device administration on Cisco IOS. With IOS devices, you can control the level of access to the shell as well as provide granular per-command authorization. This chapter covers both of the steps involved ...