 lab environment. The no login command is available only when aaa new-model is not enabled. Once aaa new-model has been enabled, the login command takes on a different meaning and syntax. This command is discussed in the section "Enabling AAA." Configuring Local Users You can create users locally on your networking device. These usernames can then be used for authentication when users log into the device. This is useful when there are a small number of users, or when using an external authentication server (dis- cussed in the section "AAA Authentication") is not practical. If you're using AAA authentication, this option is also useful as a backup: you can use the local users for authentication, should the normal external authentication server become unavailable. Chapter 24: Authentication in Cisco Devices Creating and managing users is done with the username command. Many options are available with this command; I'll focus on those that are useful for telnet or SSH access to a network device. The first step in creating a local user is to define the username. Here, I'll use the user- name GAD: 1(config)# username GAD ? access-class Restrict access by access-class autocommand Automatically issue a command after the user logs in callback-dialstring Callback dialstring callback-line Associate a specific line with this callback callback-rotary Associate a rotary group with this callback Do not require password when obtained via DNIS nocallback-verify Do not require authentication after callback noescape Prevent the user from using an escape character nohangup Do not disconnect after an automatic command nopassword No password is required for the user to log in password Specify the password for the user privilege Set user privilege level secret Specify the secret for the user user-maxlinks Limit the user's number of inbound links Set view name Simply specifying the command username GAD will create a user named GAD with no password. To add a password, include the password keyword followed by the password: R1(config)# us