User's Manual

109
to configure the local authentication and local authorization.
aaa authentication login default local
aaa authorization exec default local
!
localpass a3
non-user
non-history
element number lower-letter upper-letter special-character
min-length 10
validity 2d
!
localauthen a1
login max-tries 4 try-duration 2m
!
localauthor a2
exec privilege default 15
!
local pass-group a3
local authen-group a1
local author-group a2
!
The meaning of each command line is shown below:
 The aaa authentication login default local command is used to define the default login-
authentication method list, which will be automatically applied to all login authentication
services.
 The command is used to define the default EXEC authorization method list, which will be
automatically applied to all users requiring to enter the EXEC shell.
 The command localpass a3 defines the password policy named a3.
 The command localauthen a1 defines the authentication policy named a1.
 The command localauthor a2 defines the authorization policy named a2.
 The command local pass-group a3 applies the password policy named a3 to the default
policy group.
 The command localauthen a1 applies the authentication policy named a1 to the default
policy group.
 The command localauthor a2 applies the authorization policy named a2 to the default policy
group.