基本AAA认证配置

基本AAA认证配置

关键字

AAA 认证 Cisco认证配置 AAA配置

实验说明

• 用AAA实现Console和VTY端口的认证
• 调试AAA认证过程

配置

R3配置

!
hostname Router
!
!
aaa new-model
!
aaa authentication login CONSOLE local
aaa authentication login VTY local
aaa session-id common
ip subnet-zero
!
!
!
!
username norvel password 0 cisco
!
!
line con 0
logging synchronous
login authentication CONSOLE
!
line vty 0 4
login authentication VTY
!

调试

R3配置

Router#show aaa method-lists authentication
authen queue=AAA_ML_AUTHEN_LOGIN
name=default valid=FALSE id=0 : SERVER_GROUP CONSOLE LOCAL
name=CONSOLE valid=TRUE id=4A000000 : LOCAL
name=VTY valid=TRUE id=D6000001 : LOCAL
authen queue=AAA_ML_AUTHEN_ENABLE
authen queue=AAA_ML_AUTHEN_PPP
authen queue=AAA_ML_AUTHEN_SGBP
authen queue=AAA_ML_AUTHEN_ARAP
permanent lists
name=Permanent Enable None valid=TRUE id=0 : ENABLE NONE
name=Permanent Enable valid=TRUE id=0 : ENABLE
name=Permanent None valid=TRUE id=0 : NONE
name=Permanent Local valid=TRUE id=0 : LOCAL

退出console重新登录,查看debug aaa authentication的结果

Router#exit

Router con0 is now available

 

您现在所查看的文档出自西安深度3G网络工程师培训

Press RETURN to get started.

您现在所查看的文档出自西安深度3G网络工程师培训

User Access Verification

Username: norvel
Password:
*Feb 23 23:16:42.079: AAA/BIND(00000003): Bind i/f
*Feb 23 23:16:42.083: AAA/AUTHEN/LOGIN (00000003): Pick method list 'CONSOLE'

Router>en
Router#
*Feb 23 23:16:49.707: AAA: parse name=tty0 idb type=-1 tty=-1
*Feb 23 23:16:49.711: AAA: name=tty0 flags=0x11 type=4 shelf=0 slot=0 adapter=0 port=0 channel=0
*Feb 23 23:16:49.711: AAA/MEMORY: create_user (0x6393A658) user='norvel' ruser='NULL' ds0=0 port='tty0' rem_addr='async' authen_type=ASCII service=ENABLE priv=15 initial_task_id='0', vrf= (id=0)
*Feb 23 23:16:49.715: AAA/AUTHEN/START (1351320065): port='tty0' list='' action=LOGIN service=ENABLE
*Feb 23 23:16:49.719: AAA/AUTHEN/START (1351320065): console enable - default to enable password (if any)
*Feb 23 23:16:49.719: AAA/AUTHEN/START (1351320065): Method=ENABLE
Router#
*Feb 23 23:16:49.723: AAA/AUTHEN(1351320065): can't find any passwords
*Feb 23 23:16:49.723: AAA/AUTHEN(1351320065): Status=ERROR
*Feb 23 23:16:49.723: AAA/AUTHEN/START (1351320065): Method=NONE
*Feb 23 23:16:49.727: AAA/AUTHEN(1351320065): Status=PASS
*Feb 23 23:16:49.727: AAA/MEMORY: free_user (0x6393A658) user='norvel' ruser='NULL' port='tty0' rem_addr='async' authen_type