For the hands-on lab, there's a link just below this video to launch that lab.
If you want to launch it right now and give it a moment to initialize, that'd
be great.
And here's what I like to do. We're getting this AAA authentication and
authorization lab.
I'd like you to configure R6. That's the same router we've dealt with in the
demonstrations
up at this point. And on R6, I'd like you to configure it to be able to use a T
ACAC server
at 192.168.1.100. And the key is going to be Cisco 123 with the capital C. That
is pre-configured
already over on the triple A server. Then I'd like you to create a local user WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
already over on the triple A server. Then I'd like you to create a local user
on R6 called
admin1 with a privilege level of 15 and a password of Cisco exclamation mark 23
.
And just be aware that the same user account admin1 is also sitting over at the
triple A server.
So you'll have a local user account called admin1 with that password. And there
's also
that same user sitting over on the triple A server. Then once you have that
done, I'd like you to
configure the VTY lines for login authentication, which would involve creating
a method list for
login authentication. And in that method list, specify you want to use the TAC WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
login authentication. And in that method list, specify you want to use the TAC
AC server you
defined earlier, and then apply that method list to the VTY lines. And then
secondly,
once you've done the login authentication, I'd also like you to get on top of
that the
authorization of what that user is allowed to do. I'd like you to the
authorization for exec
and also for commands at level 0, 1, and 15. And all of those should use TACAC.
Now one thing that's going to happen here that's a little bit different is that
if we're authenticating
our admin1 user over from the TACAC server, it's going to go ahead and come up WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
our admin1 user over from the TACAC server, it's going to go ahead and come up
in user mode.
So once you're in user mode, you can type in enable. And the enable password is
upper case
C, I, S, C, O, exclamation mark 23. Or if you want to kick it up a notch and
you want to do the
authorization of the exec shell from the local database where the user is
identified as privilege
15, thus we did the demos up to this point, you can do that as well. Either way
is great,
but that's why I make you aware of the privilege mode password is Cisco ex
clamation mark 23.
And then on top of all that, I'd also like to make sure that not only is the WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then on top of all that, I'd also like to make sure that not only is the
authorization done
for commands at level 0, 1, and 15, but also I'd like to do the authorization
for any commands
they issue while in configuration mode, which we demonstrated in the videos as
well. Now on server
one, there is that little notepad document called triple A, and it is on the
desktop. If you want to
use that for reference, please feel free to so have some fun with this hands on
lab. And when
you are ready, join me in the next video and we'll do a walkthrough together.