CCIE Security Practice Labs

Section 7.0: AAA

Configure NAS entries for all AAA clients used in this lab (see Figure 2-8).

Figure 2-8. NAS Entries in CiscoSecure ACS

7.1. AAA on the Router

1. Configure TACACS+ for Telnet authentication and authorization on R2.

2. Make sure you use a named method list and apply it only to the vty line.

3. Create a separate named method list with no authentication and no authorization for console and aux.

4. Configure accounting for Level 1 and Level 5 commands and apply to the vty line. Refer to Figure 2-10 for Accounting Logs from CiscoSecure ACS.

   Figure 2-10. Accounting Logs from CiscoSecure ACS

5. Source TACACS+ with Loopback-1 as ACS is configured with IP ...