FTOS Configuration Guide for the C-Series - Force10 Networks

If rejected by the AAA server, the command is not added to the running config, and messages similar to
Message 5 are displayed.
Message 5 Configuration Command Rejection
04:07:48: %RPM0-P:CP %SEC-3-SEC_AUTHORIZATION_FAIL: Authorization failure Command
authorization failed for user (denyall) on vty0 ( 10.11.9.209 )
VTY Line and Access-Class Configuration
Various methods are available to restrict VTY access in FTOS. These depend on which authentication
scheme you use — line, local, or remote:
Table 11 VTY Access
Authentication Method
FTOS provides several ways to configure access classes for VTY lines, including:
• VTY Line Local Authentication and Authorization on page 155
• VTY Line Remote Authentication and Authorization on page 157
VTY Line Local Authentication and Authorization
FTOS retrieves the access class from the local database. To use this feature:
1. Create a username
2. Enter a password
3. Assign an access class
4. Enter a privilege level
VTY access-class
support?
Username
access-class
support? Remote authorization support?
Line YES NO NO
Local NO YES NO
TACACS+ YES NO YES (with FTOS 5.2.1.0 and later)
RADIUS YES NO YES (with FTOS 6.1.1.0 and later)
Line authentication can be assigned on a per-VTY basis; it is a simple password authentication, using an
access-class as authorization.
Local authentication is configured globally. You configure access classes on a per-user basis.
FTOS Configuration Guide, version 7.7.1.0 155