Nothing Special   »   [go: up one dir, main page]
Scribd Logo
Upload

Welcome to Scribd!

  • 3 views

    Session 07

    Uploaded by

    bouzid.salim47

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Session 07

    Uploaded by

    bouzid.salim47
    3 views9 pages

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    3 views9 pages

    Session 07

    Uploaded by

    bouzid.salim47

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 9

    Session 07

    • Server-Based Authentication
    • To configure the AAA client (router) with the TACACS+
    server.
    • R(config)# tacacs-server host ip key the-key
    • To configure the AAA client (router) with the RADIUS server.
    • R(config)# radius-server host ip key the-key

    • CONFIGURING TACACS+ ACCESS.

    • R1(config)# aaa new-model


    • R1(config)# aaa authentication login authen_list1 group tac
    local
    • R1(config)# aaa authorization exec author_list1 group tac local

    SCOR Page 1
    • R1(config)# aaa authorization exec author_list1 group tac local
    • R1(config)# aaa accounting commands 1 default start-stop
    group tacacs+
    • R1(config)# username admin privilege 15 secret P@ssw0rd
    • R1(config)# tacacs-server host 10.0.0.3 key cisco
    • R1(config)# do ping 10.0.0.3
    • R1(config)# line vty 0 4
    • R1(config-line)# login authentication authen_list1
    • R1(config-line)# authorization exec author_list1
    • R1# debug tacacs
    • R1# debug aaa authentication

    • On ISE
    • To add a network device
    • Work Centers > Device Administration > Network Resources
    and add a network device.

    SCOR Page 2
    and add a network device.

    • To configure groups and policies.


    • Work Centers > Device Administration > Policy Elements >
    Results > TACACS Profiles.

    SCOR Page 3
    Results > TACACS Profiles.

    • Implementing AAA for device access in Cisco ASA


    • ASA devices do not support local authentication without using
    AAA.
    • ASA supports different types of external servers: TACACS+,
    RADIUS, LDAP.
    • AAA authorization and accounting processes require an existing
    authentication configuration.
    • A privilege level is an integer between 0 and 15
    • To create a username and a password.

    SCOR Page 4
    • To create a username and a password.
    • ASA(config)# username name password the-password
    [privilege n]
    • ASDM, Configuration, Device Management, Users/AAA, User
    Account , Add….
    • To erase a user from the local database.
    • ASA(config)# clear configure username [name]
    • ASA(config)# aaa authentication serial|enable|telnet|ssh|http
    console LOCAL|server_group
    • Limit the number of consecutive failed local login attempts that
    the ASA allows any given user account (with
    the exception of users with a privilege level of 15).
    • ASA(config)# aaa local authentication attempts max-fail number
    • To configure the ASA with a TACACS+ or RADIUS server.
    • Configuration > Device Management > Users/AAA > AAA
    server Groups………
    - Timeout.
    • The length of time, in seconds, that the ASA waits for a
    response from the primary server before sending the
    request to the backup server.
    • Create a TACACS+ or RADIUS AAA server group.
    • ASA(config)# aaa-server server-tag protocol protocol
    • Configure a AAA server as part of a AAA server group.
    • ASA(config)# aaa-server server-tag host name|ip key
    • ASA(config-aaa-server-host)# key cisco123
    • ASA(config)# sh run aaa-server
    • To test aaa server.
    • ASA# test aaa-server authentication server-group username user
    password the-password
    • Configuration > Device Management > Users/AAA > AAA
    Server Groups > Test
    • To erase all AAA server configurations.
    • ASA(config)# clear config aaa-server
    • To view all user accounts.
    • ASA(config)# show running-conf aaa-server
    • To authenticate users who access the ASA.
    • ASA(config)# aaa authentication serial|enable|telnet|ssh|http
    console LOCAL|server-group
    • Configuration > Device Management > Users/AAA > AAA
    Access, Authentication, ……...
    • To authorize users who access the ASA.
    • Configuration > Device Management > Users/AAA > AAA
    Access, Authorization, ………

    SCOR Page 5
    Access, Authorization, ………

    SCOR Page 6
    SCOR Page 7
    SCOR Page 8
    •

    SCOR Page 9

    You might also like