拨号＋tacacs-server 认证

我爱臭豆腐

gdd2621#show run
Building configuration...

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname gdd2621
!
aaa new-model
aaa authentication login default enable
aaa authentication ppp default if-needed group tacacs+
enable password cisco
!
username ss password 0 sssym
!
!
!
!
ip subnet-zero
no ip domain-lookup
!
!         
!
!
interface FastEthernet0/0
no ip address
no ip directed-broadcast
shutdown
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.19.15.17 255.255.255.0
no ip directed-broadcast
duplex auto
speed auto
!
interface Group-Async1
ip unnumbered FastEthernet0/1
no ip directed-broadcast
encapsulation ppp
async mode interactive
peer default ip address pool gdd
ppp authentication pap ms-chap
ppp ipcp dns 10.19.15.2
ppp ipcp wins 10.19.15.2
group-range 33 48
!
ip local pool gdd 10.19.15.75 10.19.15.90
ip classless
ip route 0.0.0.0 0.0.0.0 10.19.15.254
no ip http server
!
tacacs-server host 10.19.15.55
tacacs-server key ＃＃＃＃
!
line con 0
transport input none
line 33 48
autoselect during-login
autoselect ppp
modem InOut
transport input all
line aux 0
transport input all
line vty 0 4
password ＃＃＃＃＃＃
!         
end

bb888

认证服务器与认证路由器之间能否相隔一路由器(上连多一级)?

morningtrain

我觉得可以，试试吧，告诉我们结果。

bb888

试过,发现不行,不知是不是有什么别的地方要注意一下,谢了

morningtrain

我也试过，记费服务器和设备端必须在同一网段内，不能隔路由器。

oicqcx

你们的TACACS+服务器是怎么架设的，用的什么软件？在什么系统下？小弟现在很需要知道，希望大虾赐教啊