The following eight tasks are required to enable AAA authentication proxy services. These tasks must be configured in Global Configuration mode before authentication proxy can be configured.
Enable AAA.
Define the security server (TACACS+ or RADIUS).
Define a server key (TACACS+ or RADIUS).
Define the list of login authentication methods.
Enable authentication proxy for AAA.
Activate authentication proxy accounting.
Create an ACL entry to allow return traffic from the AAA server to the firewall.
Enable the HTTP server feature to work with AAA.