If a RADIUS or a TACACS+ server is not configured, then password, profiles, and user access information must be configured on each router in the domain.
If a RADIUS authorization is enabled, then VSAs must be configured on the RADIUS server.