Server Based Authentication

With the server-based method, the router accesses a central AAA server

The AAA server contains the usernames and password for all users

The router uses either the Remote Authentication Dial-In User Service (RADIUS) or Terminal Access Controller Access Control System (TACACS+) protocols to communicate with the AAA server

When there are multiple routers and switches, server-based AAA is more appropriate.