3A_tacacs认证
一、网络拓扑：
二、ACS配置：
1、添加用户test。
2、network configuration
三、cisco2950配置
1 、使用pc机的串口连接cisco 2950的console口
2 、使用超级终端(或CRT)连接串口
3 、进行交换机配置,命令如下:
//将端口1/2加入vlan1,设置vlan的IP
Switch#config
Switch#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#in
Switch(config)#interface vlan 1
Switch(config-if)#ip address 192.168.0.121 255.255.255.0
Switch(config-if)#no shut
Switch(config-if)#exit
Switch(config)#interface fastEthernet 0/1
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 1
Switch(config)#interface fastEthernet 0/2
Switch(config-if)#sw
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 1
Switch(config-if)#exit
Switch(config)#exit
Switch#
1d05h: %SYS-5-CONFIG_I: Configured from console by ikey on console
Switch#show ip interface brief
Interface
IP-Address OK? Method Status Protocol
Vlan1
192.168.0.118 YES manual up up
FastEthernet0/1
unassigned YES unset up up
FastEthernet0/2
unassigned YES unset down down
FastEthernet0/3
unassigned YES unset down down
FastEthernet0/4
unassigned YES unset down down
FastEthernet0/5
unassigned YES unset down down
FastEthernet0/6
unassigned YES unset down down
FastEthernet0/7
unassigned YES unset down down
FastEthernet0/8
unassigned YES unset down down
FastEthernet0/9
unassigned YES unset down down
FastEthernet0/10
unassigned YES unset down down
FastEthernet0/11
unassigned YES unset down down
FastEthernet0/12
unassigned YES unset down down
FastEthernet0/13
unassigned YES unset down down
FastEthernet0/14
unassigned YES unset down down
FastEthernet0/15
unassigned YES unset down down
FastEthernet0/16
unassigned YES unset down down
FastEthernet0/17
unassigned YES unset down down
FastEthernet0/18
unassigned YES unset down down
FastEthernet0/19
unassigned YES unset down down
FastEthernet0/20
unassigned YES unset down down
FastEthernet0/21
unassigned YES unset down down
FastEthernet0/22
unassigned YES unset down down
FastEthernet0/23
unassigned YES unset down down
FastEthernet0/24
unassigned YES unset down down
//设置tacacs+认证
tacacs-server host 192.168.0.119
tacacs-server directed-request
tacacs-server key hahatest
enable secret cisco
‘定义enable密码
aaa new-model
‘启用AAA认证
aaa authentication login tac_auth tacacs+
aaa authentication login no_tacacs none
line con 0
（此段表示通过con口管理时不进行radius认证）
login authentication no_tacacs
transport output none
exit
line vty 0 4
（telnet）
login authentication tac_auth
4、使用pc机telnet到设置的vlan1 IP,输入认证服务器用户名和密码进行认证
本文出自 “people” 博客，转载请与作者联系！