防火墙技术实验报告范本

1、防火墙技术实验报告时间： 2012-03-13实验名称：简单的 AAA 配置班级计算机网络技术100#姓名#实验内容1 、拓扑图：2 、实验设备：1). 用一台 PC 机桥接到 VMware内 win server2003服务器；2). 用两台 Router c3600，一台做 NAS 、一台做 Client ；3 、实验步骤：NAS ：NAS(config)#int f1/0NAS(config-if)#ip add 192.168.139.254 255.255.255.0NAS(config-if)#no shutNAS(config)#int f0/0NAS(config-if)#ip

2、 add 192.168.2.254 255.255.255.0NAS(config-if)#no shutNAS(config)#username cisco privilege 15 password ciscoNAS(config)#enable secret cisco-配置 enable 密码 -NAS(config)#aaa new-modelNAS(config)#aaa authen login-开启 AAA 功能 -cisco group tacacs+ localNAS(config)#aaa authen loginlhy noneNAS(config)#line vty

3、 0 15NAS(config-line)#login authenNAS(config-line)#exiNAS(config)#line con 0ciscoNAS(config-line)#login authenticationlhyNAS(config-line)#exiNAS(config)#tacacs-server host 192.168.139.4 key cisco- 配置共享 key-Client:Client(config)#int f0/0Client(config-if)#ip add 192.168.2.2 255.255.255.0Client(config-

4、if)#no shutClient(config)#no ip routingClient(config)#ip default-gateway 192.168.2.254Client#ping 192.168.139.254Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.139.254, timeout is 2 seconds:!在 VMware中配置：NAS:NAS#test aaa group tacacs+cisco cisconew-codeTrying to authenticate

5、with Servergroup tacacs+Sending passwordUser successfully authenticated-认证成功 -NAS#NAS(config)#aaa authentication enable default group tacacs+-将 enable 加入 AAA 认证中 -NAS(config)#aaa authorization exec default group tacacs+NAS(config)#aaa accounting exec default start-stop group tacacs+- 默认审计方式 -NAS(con

6、fig)#aaa accounting commands 15 default start-stop group tacacs+-命令审计方式-Client:将 enable 加入 AAA 认证里的验证结果：lient#telnet 192.168.139.254Trying 192.168.139.254 . OpenUser Access VerificationUsername: ciscoPassword:NAS>enPassword:NAS#conf tNAS(config-if)#endNAS#exi-验 证 成功-Connection to 192.168.139.254

7、closed by foreign hostClient#授权（ authorization）验证结果：Client#telnet 192.168.139.254Trying 192.168.139.254 . OpenUsername: ciscoPassword:NAS#-直接进入特权模式 -NAS#conf tNAS(config)#exiNAS#exiConnection to 192.168.139.254 closed by foreign hostClient#-授权成功 -审计（ accounting）用 default验证：Client#telnet 192.168.139.

8、254Trying 192.168.139.254 . OpenUsername: ciscoPassword:NAS#conf tEnter configuration commands, one per line.End with CNTL/Z.NAS(config)#endNAS#sh running-configNAS#sh versionNAS#exiConnection to 192.168.139.254 closed by foreign hostClient#审计（ accounting）用 commands验证：Client#telnet 192.168.139.254Tr

9、ying 192.168.139.254 . OpenUsername: ciscoPassword:NAS#conf tEnter configuration commands, one per line.End with CNTL/Z.NAS(config)#exiNAS#sh running-configNAS#sh versionNAS#conf tEnter configuration commands, one per line.End with CNTL/Z.NAS(config)#int lo 0NAS(config-if)#ip add 2.2.2.2 255.255.255.0NAS(config-if)#exiNAS(config)#exiNAS#exiConnection to 192.168.139.254 closed by foreign hostClient#实验结果