Cisco AS5300 - Universal Access Server Manual de configuração - Página 7
Procurar online ou descarregar pdf Manual de configuração para Servidor Cisco AS5300 - Universal Access Server. Cisco AS5300 - Universal Access Server 46 páginas. Access server
Também para Cisco AS5300 - Universal Access Server: Apêndice (10 páginas), Manual de início rápido (25 páginas), Manual (21 páginas)
Imprimir página
Chapter 2
Configuring the Cisco AS5300 Network Access Server
To configure local AAA security, enter the following commands beginning in global configuration
mode:
Make sure to change "joe-admin" to your own username and "joe-password" to your own
Note
password.
Create a local login database and username for yourself. This step also prevents you from getting locked
Step 1
out of the access server.
hq-sanjose(config)# username joe-admin password joe-password
Initiate the AAA access control system. This step immediately locks down login and PPP
Step 2
authentication.
hq-sanjose(config)# aaa new-model
Configure AAA to perform login authentication by using the local username database. The login
Step 3
keyword authenticates shell/EXEC users.
hq-sanjose(config)# aaa authentication login default local
Configure PPP authentication to use the local database if the session was not already authenticated by
Step 4
login.
hq-sanjose(config)# aaa authentication ppp default if-needed local
Note
After you finish setting up basic security, you can enhance the security solution by
extending it to an external TACACS+ or RADIUS server. This case study describes only
local AAA security.
Verifying Local AAA Security Configuration
Log in with your username:password.
Step 1
Enter the login command at the EXEC shell prompt. If you get in, the login authentication is working
Step 2
with your local username. Do not disconnect your access server session until you can log in
successfully. (If you get locked out, recover your password by rebooting the access server.)
hq-sanjose# login
User Access Verification
Username: joe-admin
Password: joe-password
hq-sanjose#
Task 1—Setting Up Basic Configuration Parameters
Cisco IOS Dial Services Quick Configuration Guide
2-7