User Manual

Configuring Authentication, Authorization, and Accounting
Table 9 Administrator Authentication
Task Root Command Notes
Configure administrator
authentication.
aaa authentication admin
istrator
Enter this command in the context
configuration mode.
You have the option to configure either
the console port or a vty port for each
specified authentication method. By
default, both ports are enabled for use.
Use either the console or vty keyword
as needed.
2.2.2 Configuring Subscriber Authentication
To configure subscriber authentication, you must perform the following tasks:
• Configure IP Address Assignment
• Enable the Assignment of Preferred IP Addresses
• Change the Default Order for Determining Subscriber IP Addresses
• Configure Global RADIUS Authentication
• Configure Context-Specific RADIUS Authentication
• Authenticate Router (Local)
• Configure DHCPv6 Interface Authentication
• Configure Context-Specific RADIUS and Global RADIUS Authentication
• Authenticate Context-Specific RADIUS and Router (Local)
• Configure a Last-Resort Authentication Context
2.2.2.1 Configure IP Address Assignment
To configure the algorithm the router uses to assign subscriber IPv4 address,
perform the task described in Table 10.
Table 10 Assignment of IPv4 or IPv6 IP Addresses
Task Root Command Notes
Change the logic the router uses to
allocate subscriber IP addresses from
the default algorithm (round-robin) to a
first-available algorithm.
aaa ip-pool
allocation
first-available
Enter this command in the global
configuration mode.
12 61/1543-CRA 119 1170/1 Uen L | 2012-12-04