Difference between revisions of "CCNP TSHOOT Learning Guide/Chapter 9"
From Teknologisk videncenter
m (→AAA) |
m (→Radius) |
||
| Line 2: | Line 2: | ||
==AAA== | ==AAA== | ||
===Radius=== | ===Radius=== | ||
| + | Example | ||
<source lang=cli> | <source lang=cli> | ||
enable secret 5 $1$zH7k$U84Js/TPyh3mzsPpuQss/1 | enable secret 5 $1$zH7k$U84Js/TPyh3mzsPpuQss/1 | ||
| Line 27: | Line 28: | ||
transport input ssh | transport input ssh | ||
</source> | </source> | ||
| + | |||
=== Troubleshooting=== | === Troubleshooting=== | ||
*'''debug aaa authorization''' | *'''debug aaa authorization''' | ||
Revision as of 15:48, 18 June 2010
Contents
Maintaining and Troubleshooting Network Security Implementations
AAA
Radius
Example
enable secret 5 $1$zH7k$U84Js/TPyh3mzsPpuQss/1
!
username admin secret 5 $1$yGKr$lvsrt5i61iV63FohXNTPS0
aaa new-model
!
aaa authentication login default local
aaa authentication login CONSOLE none
aaa authentication login TELNET_LINES group radius local
aaa authorization exec default group radius local
aaa authorization exec TELNET_LINES group radius local
!
aaa session-id common
ip telnet source-interface Vlan100
ip ssh source-interface Vlan100
!
line con 0
exec-timeout 60 0
logging synchronous
login authentication CONSOLE
line vty 0 4
exec-timeout 60 0
login authentication TELNET_LINES
transport input sshTroubleshooting
- debug aaa authorization
- debug aaa accounting
- debug aaa authentication
- debug radius
- debug tacacs