cisco aaa 認(rèn)證配置

《cisco aaa 認(rèn)證配置》由會(huì)員上傳分享，免費(fèi)在線閱讀，更多相關(guān)內(nèi)容在應(yīng)用文檔-天天文庫。

1、AAA?防火墻?認(rèn)證簡單實(shí)驗(yàn)(2010-12-3010:15:37)?定義好防火墻初始設(shè)置讓其具有簡單的連通性?定義AAA服務(wù)器的名字和協(xié)議ASA(config)#aaa-Serverfanfan.3aprotocoltacacs+定義AAA服務(wù)器連接的接口，地址和加密密鑰ASA(config)#aaa-serverfanfan.3a(dmz)host192.168.1.10ASA(config-aaa-server-host)#keycisco?Shrun查看一下ASA#shrunaaa-serveraaa-serverfanfan.3aprotocoltaca

2、cs+aaa-serverfanfan.3a(dmz)host192.168.1.10?keycisco?到AAA服務(wù)器添加客戶端192.168.1.1???keycisco???創(chuàng)建一個(gè)用戶fanfan密碼fanfan?服務(wù)器已經(jīng)定義了客戶?客戶也已經(jīng)定義服務(wù)器并且創(chuàng)建了用戶接下來測試一下ASA#testaaaauthenticationfanfan.3aServerIPAddressorname:192.168.1.10Username:fanfanPassword:******INFO:AttemptingAuthenticationtesttoIPaddr

3、ess<192.168.1.10>(timeout:12seconds)INFO:AuthenticationSuccessful??????????????????--------------認(rèn)證成功?配置telnet使用AAA服務(wù)器認(rèn)證ASA(config)#telnet00insideASA(config)#aaaauthentelnetconsolefanfan.3a?現(xiàn)在到10.1.1.10這臺(tái)主機(jī)測試?telnet10.1.1.1?可以看到輸入fanfan?passwordfanfan?可以成功登錄到ASA?穿越協(xié)議認(rèn)證支持對(duì)httphttpsftpt

4、elnet四種類型配置Cut-through（telnet）?定義AAA服務(wù)器?已經(jīng)定義過??定義需認(rèn)證的流量?ASA(config)#access-listfanfan.authpermittcpanyanyeq23配置Cut-through???inside?telnet出去的流量需要做認(rèn)證?ASA(config)#aaaauthenticationmatchfanfan.authinsidefanfan.3a?到192.168.1.10測試outside地址?提示輸入用戶名密碼??輸入fanfan?passwordfanfan?即可登錄?輸入showuaut

5、hASA#shuauASA#shuauth???????????????????????Current???MostSeenAuthenticatedUsers??????1?????????1AuthenInProgress???????0?????????1user'fanfan'at10.1.1.10,authenticated(idlefor0:01:03)??absolute??timeout:0:05:00??inactivitytimeout:0:00:00?可以看到已經(jīng)有一個(gè)名叫fanfan的用戶被認(rèn)證?ASA#shaaa-serverfanfan

6、.3aServerGroup:???fanfan.3aServerProtocol:tacacs+ServerAddress:?192.168.1.10Serverport:????49Serverstatus:??ACTIVE,Lasttransactionat00:15:05UTCTueNov301999Numberofpendingrequests?????????????0Averageroundtriptime????????????????482msNumberofauthenticationrequests??????3Numberofauthori

7、zationrequests???????0Numberofaccountingrequests??????????0Numberofretransmissions??????????????0Numberofaccepts??????????????????????3Numberofrejects??????????????????????0Numberofchallenges???????????????????0Numberofmalformedresponses??????????0Numberofbadauthenticators???????????0

8、Numbe