AAA & ACS Server(TACACS+, RADIUS)
@ R1
username test password test
!
enable secret cisco
!
aaa new-model
!
aaa authentication login VTY group tacacs+ local
aaa authentication login CON local
!
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ if-authenticated
!
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
!
tacacs-server host 192.168.1.101 key cisco1234
!
line con 0
login authentication CON
!
line vty 0 4
login authentication VTY
R1#test aaa group tacacs+ admin cisco legacy