cisco aaa 认证配置

《cisco aaa 认证配置》由会员上传分享，免费在线阅读，更多相关内容在应用文档-天天文库。

1、AAA 防火墙 认证简单实验(2010-12-3010:15:37) 定义好防火墙初始设置让其具有简单的连通性 定义AAA服务器的名字和协议ASA(config)#aaa-Serverfanfan.3aprotocoltacacs+定义AAA服务器连接的接口，地址和加密密钥ASA(config)#aaa-serverfanfan.3a(dmz)host192.168.1.10ASA(config-aaa-server-host)#keycisco Shrun查看一下ASA#shrunaaa-serveraaa-serverfanfan.3aprotocoltaca

2、cs+aaa-serverfanfan.3a(dmz)host192.168.1.10 keycisco 到AAA服务器添加客户端192.168.1.1   keycisco   创建一个用户fanfan密码fanfan 服务器已经定义了客户 客户也已经定义服务器并且创建了用户接下来测试一下ASA#testaaaauthenticationfanfan.3aServerIPAddressorname:192.168.1.10Username:fanfanPassword:******INFO:AttemptingAuthenticationtesttoIPaddr

3、ess<192.168.1.10>(timeout:12seconds)INFO:AuthenticationSuccessful                  --------------认证成功 配置telnet使用AAA服务器认证ASA(config)#telnet00insideASA(config)#aaaauthentelnetconsolefanfan.3a 现在到10.1.1.10这台主机测试 telnet10.1.1.1 可以看到输入fanfan passwordfanfan 可以成功登录到ASA 穿越协议认证支持对httphttpsftpt

4、elnet四种类型配置Cut-through（telnet） 定义AAA服务器 已经定义过  定义需认证的流量 ASA(config)#access-listfanfan.authpermittcpanyanyeq23配置Cut-through   inside telnet出去的流量需要做认证 ASA(config)#aaaauthenticationmatchfanfan.authinsidefanfan.3a 到192.168.1.10测试outside地址 提示输入用户名密码  输入fanfan passwordfanfan 即可登录 输入showuaut

5、hASA#shuauASA#shuauth                       Current   MostSeenAuthenticatedUsers      1         1AuthenInProgress       0         1user'fanfan'at10.1.1.10,authenticated(idlefor0:01:03)  absolute  timeout:0:05:00  inactivitytimeout:0:00:00 可以看到已经有一个名叫fanfan的用户被认证 ASA#shaaa-serverfanfan

6、.3aServerGroup:   fanfan.3aServerProtocol:tacacs+ServerAddress: 192.168.1.10Serverport:    49Serverstatus:  ACTIVE,Lasttransactionat00:15:05UTCTueNov301999Numberofpendingrequests             0Averageroundtriptime                482msNumberofauthenticationrequests      3Numberofauthori

7、zationrequests       0Numberofaccountingrequests          0Numberofretransmissions              0Numberofaccepts                      3Numberofrejects                      0Numberofchallenges                   0Numberofmalformedresponses          0Numberofbadauthenticators           0

8、Numbe