第11章 AAA-11.1 配置AAA本地认证

1.R2配置

[R2]interface GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]ip address 12.1.1.2 8
[R2]aaa
[R2-aaa]authentication-scheme default
[R2-aaa-authen-default]authentication-mode local 
[R2-aaa-authen-default]quit
[R2-aaa]authorization-scheme default 
[R2-aaa-author-default]authorization-mode local
[R2-aaa-author-default]quit
[R2-aaa]local-user dsrw password cipher dsrw.com
[R2-aaa]local-user dsrw service-type telnet 
[R2-aaa]local-user dsrw privilege level 15
[R2-aaa]quit 
[R2]user-interface vty 0 4
[R2-ui-vty0-4]authentication-mode aaa

2.R1配置及登录R2

[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip address 12.1.1.1 8

<R1>telnet 12.1.1.2
  Press CTRL_] to quit telnet mode
  Trying 12.1.1.2 ...
  Connected to 12.1.1.2 ...
Login authentication
Username:dsrw
Password:
<R2>

3.R2查看登录用户

<R2>dis users
  User-Intf    Delay    Type   Network Address     AuthenStatus    AuthorcmdFlag
+ 0   CON 0   00:00:00                                   pass                     Username : Unspecified

  129 VTY 0   00:00:10  TEL    12.1.1.1                  pass                     Username : dsrw