路由器安全管理，AAA
在路由器上启动AAA服务 并在con接口上启用本地认证，若认证失败则无法登陆；在vty 接口上启用radius。若失败则不认证。配置如下； 1 R1(config)#aaa new-model //开启aaa服务 R1(config)#aaa authentication login con local //配置登陆con时，使用本地认证 R1(config)#line con 0 R1(config-line)#login authentication con //在con上应用该认证 现在用debug aaa authentica...
以下是路由器的配置 ??! ??version 12.2 ??service timestamps debug uptime ??service timestamps log uptime ??no service password-encryption ??! ??hostname xxxxxxx ??! ??aaa new-model ??! ??! ??aaa group server radius pppoe ??server 10.72.254.125 auth-port 1645 acct-port 1646 ??server 10.72.253.7 auth-port 1645 acct-port 1646 ??! ??aaa authentication ppp default group pppoe ??aaa authorization network...
TACACS+ provide command authorization because of its protocol implementation while RADIUS does not. aaa authentication enable default group tacacs+ -> After typing this command, 'enable' will go to tacacs+ server to check password. Meanwhile, tacacs+ server (Cisco secure ACS) enable setting will take effect (such as max privilege level for aaa client). aaa authorization exec -> Cisco IOS She...
IBM AIX 认证 000-238 - p5 and pSeries Technical Sales Support (IBM pSeries售前技术支持专家认证 ) 000-239 - p5 Solution Sales (IBM pSeries方案销售专家认证 ) 000-222 - pSeries Administration and Support for AIX 5L V5.3 000-233 - AIX 5L Installation, Backup and System Recovery 000-234 - AIX 5L Performance and Systems Tuning 000-235 - AIX 5L Problem Determination 000-237 - pSeries HACMP f...
