AAA 基本认证配置.doc

基本AAA认证配置关键字AAA 认证 Cisco认证配置 AAA配置 实验说明 用AAA实现Console和VTY端口的认证 调试AAA认证过程 配置R3配置!hostname Router !aaa new-model!aaa authentication login CONSOLE localaaa authentication login VTY localaaa session-id commonip subnet-zero!username norvel password 0 cisco!line con 0logging synchronouslogin authentication CONSOLE! line vty 0 4login authentication VTY!调试R3配置Router#show aaa method-lists authentication authen queue=AAA_ML_AUTHEN_LOGINname=default valid=FALSE id=0 : SERVER_GROUP CONSOLE LOCAL name=CONSOLE valid=TRUE id=4A000000 : LOCAL name=VTY valid=TRUE id=D6000001 : LOCAL authen queue=AAA_ML_AUTHEN_ENABLEauthen queue=AAA_ML_AUTHEN_PPPauthen queue=AAA_ML_AUTHEN_SGBPauthen queue=AAA_ML_AUTHEN_ARAPpermanent listsname=Permanent Enable None valid=TRUE id=0 : ENABLE NONE name=Permanent Enable valid=TRUE id=0 : ENABLE name=Permanent None valid=TRUE id=0 : NONE name=Permanent Local valid=TRUE id=0 : LOCAL 退出console重新登录,查看debug aaa authentication的结果 Router#exitRouter con0 is now available您现在所查看的文档出自西安深度3G网络工程师培训Press RETURN to get started.您现在所查看的文档出自西安深度3G网络工程师培训User Access VerificationUsername: norvelPassword: *Feb 23 23:16:42.079: AAA/BIND(00000003): Bind i/f *Feb 23 23:16:42.083: AAA/AUTHEN/LOGIN (00000003): Pick method list CONSOLE RouterenRouter#*Feb 23 23:16:49.707: AAA: parse name=tty0 idb type=-1 tty=-1*Feb 23 23:16:49.711: AAA: name=tty0 flags=0x11 type=4 shelf=0 slot=0 adapter=0 port=0 channel=0*Feb 23 23:16:49.711: AAA/MEMORY: create_user (0x6393A658) user=norvel ruser=NULL ds0=0 port=tty0 rem_addr=async authen_type=ASCII service=ENABLE priv=15 initial_task_id=0, vrf= (id=0)*Feb 23 23:16:49.715: AAA/AUTHEN/START (1351320065): port=tty0 list= action=LOGIN service=ENABLE*Feb 23 23:16:49.719: AAA/AUTHEN/START (1351320065): console enable - default to enable password (if any)*Feb 23 23:16:49.719: AAA/AUTHEN/START (1351320065): Method=ENABLERouter#*Feb 23 23:16:49.723: AAA/AUTHEN(1351320065): cant find any passwords*Feb 23 23:16:49.723: AAA/AUTHEN(1351320065): Status=ERROR*Feb 23 23:16:49.723: AAA/AUTHEN/START (1351320065): Method=NONE*Feb 23 23:16:49.727: AAA/AUTHEN(1351320065): Status=PASS*Feb 23 23:16:49.727: AAA/MEMORY: free_user (0x63