Cisco CCNA (640-553) Security Training

 

Using the “aaa processes” command

 

By Charles Ross CCNA - CCNP #CSCO10444244

 

In today’s article, I’m going to quickly inform you about the Cisco IOS global configuration mode command named “aaa processes”

 

CCNA’s (like you) use the “aaa processes” command, to allocate a specific number of background processes to be used to process AAA authentication and authorization requests for PPP.

 

In other words, network administrators use the command to allocate a specific number of background processes to simultaneously handle multiple AAA authentication and authorization requests for PPP. This simply means a router configured with the command will be able to authenticate or authorize more than one PPP user at a time.

 

Below is the command’s syntax:

 

aaa processes number

 

As you can see this command is very easy to implement, the number argument is used to define the number (from 1 to 2147483647) of background processes allocated to process AAA authentication and authorization requests for PPP users. Basically with the number argument you are defining how many new users can be simultaneously authenticated, the number can be increased or decreased at any time.

 

Note: If you don’t use the command the default is one, which means only one PPP user can be authenticated (authorized) at a time.

 

Below is an example of the command being used:

 

Router>enable

Router#configure terminal

Router(config)#aaa new-model

Router(config)#aaa authentication ppp dialins group radius local

Router(config)#aaa processes 11

Router(config)#exit

Router#copy run start

 

In the example above, the authentication method list named “dialins” is specifying RADIUS as the method of authentication, then (if the RADIUS server does not respond) local authentication will be used on serial lines using PPP. And, eleven background processes have been allocated to handle AAA requests for PPP users.


And, just like mostly all Cisco IOS commands; you can use the word “no” in front of the command to remove (disable) the configured command; like you see below:

  

Router(config)#no aaa processes 11

  

By the way, if you decide to use the command, make sure your router(s) is running Cisco IOS 11.3(2)T or higher.

 

I hope this article was very informative and helped you quickly understand the usage of the aaa processes command. If you need to learn more; I suggest you visit my website, (www.ccnaittechtips.com) were you’ll find the latest information regarding the Cisco CCNA (640-553) Security exam techniques.

 

To your success,

 

Charles Ross

CCNA- CCNP #CSCO10444244

http://www.ccnaittechtips.com