AAA服务器搭建与实验过程

   案例1              AAA服务器搭建与实验过程

拓扑图：

1.      aaa服务器的搭建：

        RADIUS客户端配置：

        System-view

        Sysname sw1

        Radius scheme abc

        Primary authentication 192.168.100.100

        Key  authentication 123456

        Accounting optional

        Server-type standard

        User-name-format without-domain

        Quit

        Domain zzu

        Radius scheme abc

        Access-list enable 10

        quit

        Dot1x  authentication-method  pap

        Inter e0/7

        Dot1x

AAA认证服务器：

1：首先从开始里面打开windows的控制面板，选择增加删除组件选项，然后选择网络服务选项，点详细信息

2：从开始里面选择管理工具，internet验证服务，新建客户端此处为192.168.100.32

3：在远程访问策略选项中选择更该配置文件，并更改身份验证为pap 验证模式

2.测试

3.连接

  案例2    

                cisco Acs+h3c交换机做telnet测试

实验目的：通过在思科的acs所做成的认证服务器建立用户，与华为的交换机（radius客户端）配合，完成telnet登录。(本案例略去了acs的安装以及华为私有命令导入的过程)

  拓扑图：

Acs配置：

telnet测试：

 

交换机配置：

<SW12>dis cu

#

sysname SW12

#

radius scheme system

server-type huawei

primary authentication 127.0.0.1 1645

primary accounting 127.0.0.1 1646

user-name-format without-domain

radius scheme abc

server-type huawei

primary authentication 192.168.100.156 1812

accounting optional

key authentication 123456

user-name-format without-domain

domain system

radius-scheme system

access-limit disable

state active

vlan-assignment-mode integer

idle-cut disable

self-service-url disable

messenger time disable

domain zzu

radius-scheme abc

access-limit enable 10

state active

vlan-assignment-mode integer

idle-cut disable

self-service-url disable

messenger time disable

domain default enable system

#

local-server nas-ip 127.0.0.1 key huawei

local-user user1

password simple 123

service-type telnet level 3

#

vlan 1

#

interface Vlan-interface1

ip address 192.168.100.32 255.255.255.0

#

interface Aux0/0

#

interface Ethernet0/1

#

interface Ethernet0/2

#

interface Ethernet0/3

#

interface Ethernet0/4

#

interface Ethernet0/5

#

interface Ethernet0/6

#

interface Ethernet0/7

#

interface Ethernet0/8

#

interface Ethernet0/9

#

interface Ethernet0/10

#

interface Ethernet0/11

#

interface Ethernet0/12

#

interface Ethernet0/13

#

interface Ethernet0/14

#

interface Ethernet0/15

#

interface Ethernet0/16

#

interface Ethernet0/17

#

interface Ethernet0/18

#

interface Ethernet0/19

#

interface Ethernet0/20

#

interface Ethernet0/21

#

interface Ethernet0/22

#

interface Ethernet0/23

#

interface Ethernet0/24

port link-type trunk

port trunk permit vlan all

#

interface NULL0

#

user-interface aux 0

user-interface vty 0 4

authentication-mode scheme

#

return

<SW12>