This section describes security configuration guidelines and caveats.
If a RADIUS or a TACACS+ server is not configured, password, profiles, and user access information must be configured on each router in the domain.
If RADIUS authorization is enabled, VSAs must be configured on the RADIUS server.