說明:簡單的Packet Tracer的Lab,主要是ACS與Router之間的設定,
會將建立ACS的指令用紅色標示,但不做解釋,前一篇已有解釋。
為了減少行數,刪除不必要之設定。
實作條件:
一、PC要Telnet進Router需要到ACS做帳號密碼驗證。
先附上不專業PKT檔:丟我丟我 ( 載點失效,請回報 )
RO_A Show Run如下:
RO_A#sh run
Building configuration...
Current configuration : 853 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname RO_A
!
ip dhcp pool LAN_POOL
network 192.168.2.0 255.255.255.0
default-router 192.168.2.254
!
aaa new-model
aaa authentication login CONSOLE none
aaa authentication login VTY group tacacs+ group radius
!
interface FastEthernet0/0
ip address 192.168.1.254 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.2.254 255.255.255.0
duplex auto
speed auto
!
ip classless
!
tacacs-server host 192.168.1.250 key cisco
radius-server host 192.168.1.250 auth-port 1645 key cisco
!
line con 0
login
login authentication CONSOLE
line vty 0 4
login
login authentication VTY
!
end
附上一些設定和成果截圖:
留言列表