# ACCESS_AUTHENTICATION_CONTROL

create radius server_host 10.90.90.160 auth_port 1812 acct_port 1813 encryption_key "kasFfdsA==" timeout 5 retransmit 2
config aaa server_group radius delete server_host 10.90.90.160 protocol radius
create radius server_host 10.90.91.160 auth_port 1812 acct_port 1813 encryption_key "kasFfdaA==" timeout 5 retransmit 2
config aaa server_group radius delete server_host 10.90.91.160 protocol radius
config aaa server_group  radius add server_host 10.90.90.160 protocol radius
config aaa server_group  radius add server_host 10.90.91.160 protocol radius
config authen_login default method  local
create authen_login method_list_name rad_ext
config authen_login method_list_name rad_ext method radius local
config authen_enable default method  local_enable
config accounting default method  none
config authen application console login default
config authen application console enable default
config authen application telnet login method_list_name rad_ext
config authen application telnet enable default
config authen application ssh login method_list_name rad_ext
config authen application ssh enable default
config authen application http login method_list_name rad_ext
config authen application http enable default
disable aaa_server_password_encryption
enable authen_policy
config authen parameter response_timeout 30                                     
config authen parameter attempt 3
config admin local_enable encrypt sha_1 *@&2jmj7l5rsdsMs6D
config accounting service network state disable
config accounting service shell state disable
config accounting service system state disable
config accounting service command administrator none
config accounting service command operator none
config accounting service command power_user none
config accounting service command user none