netravnen/NetworkLabNotes
1
0
Fork 0
mirror of https://gitlab.com/netravnen/NetworkLabNotes.git synced 2024-11-26 19:27:57 +00:00
Code Releases Activity

Fixed indention

Browse source
This commit is contained in:
chhan11 2017-06-08 20:01:23 +02:00
parent 3942377108
commit 3b475bbc59
1 changed files with 62 additions and 60 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

122
chapter/mgmt.tex
View file

@ -222,22 +222,22 @@ Other things can go wrong, too. Such as
\fig{radius/radiuscommunication}{radiuscommunication}{Radius handshake and communication} \fig{radius/radiuscommunication}{radiuscommunication}{Radius handshake and communication}
\begin{txt} \begin{cisco}
radius server DK-RADIUS-SERVER radius server DK-RADIUS-SERVER
address ipv4 radiusserver.example.com auth-port 1812 acct-port 1813 address ipv4 radiusserver.example.com auth-port 1812 acct-port 1813
key unkn0wn!unic@st.|. key unkn0wn!unic@st.|.
! !
aaa new-model aaa new-model
aaa group server RADIUS aaa group server RADIUS
server name DK-RADIUS-SERVER server name DK-RADIUS-SERVER
! !
aaa authentication login radius_list group RADIUS local aaa authentication login radius_list group RADIUS local
! !
line vty 0-4 line vty 0 4
login authentication radius_list login authentication radius_list
line vty 5-15 line vty 5 15
login authentication radius_list login authentication radius_list
\end{txt} \end{cisco}
\newpage \newpage
@ -245,39 +245,39 @@ Other things can go wrong, too. Such as
\fig{tacacsplus/tacacspluscommunication}{tacacspluscommunication}{Tacacs plus handshake and communication} \fig{tacacsplus/tacacspluscommunication}{tacacspluscommunication}{Tacacs plus handshake and communication}
\begin{txt} \begin{cisco}
aaa group server tacacs+ TACACS aaa group server tacacs+ TACACS
server-private 1.1.1.1 unkn0wn!unicAst server-private 1.1.1.1 unkn0wn!unicAst
ip tacacs source-interface Loopback0 ip tacacs source-interface Loopback0
! !
aaa authentication attempts login 1 aaa authentication attempts login 1
aaa authentication login default group TACACS local-case aaa authentication login default group TACACS local-case
aaa authentication login console local-case aaa authentication login console local-case
aaa authentication enable default group TACACS enable aaa authentication enable default group TACACS enable
aaa authorization exec default group TACACS local aaa authorization exec default group TACACS local
aaa authorization commands 0 default group TACACS local aaa authorization commands 0 default group TACACS local
aaa authorization commands 15 default group TACACS local aaa authorization commands 15 default group TACACS local
aaa accounting exec default aaa accounting exec default
action-type start-stop action-type start-stop
group tacacs+ group tacacs+
! !
aaa accounting commands 1 default aaa accounting commands 1 default
action-type start-stop action-type start-stop
group tacacs+ group tacacs+
! !
aaa accounting commands 2 default aaa accounting commands 2 default
action-type start-stop action-type start-stop
group tacacs+ group tacacs+
! !
aaa accounting commands 15 default aaa accounting commands 15 default
action-type start-stop action-type start-stop
group tacacs+ group tacacs+
! !
aaa session-id common aaa session-id common
! !
tacacs-server host 10.21.0.45 tacacs-server host 10.21.0.45
tacacs-server unkn0wn!unicAst tacacs-server unkn0wn!unicAst
\end{txt} \end{cisco}
\section{802.1X} \section{802.1X}
@ -309,17 +309,19 @@ Cisco switches allow by default only the following 3 protos until the client is
\subsection*{Enable with Cisco config} \subsection*{Enable with Cisco config}
\begin{txt} \begin{cisco}
aaa new-model aaa new-model
radius server host radiusserver.example.com key .unkown!unicAst. radius server host radiusserver.example.com key .unkown!unicAst.
aaa group server radius RADIUS-SERVER-DK aaa group server radius RADIUS-SERVER-DK
server radiusserver.example.com server radiusserver.example.com
aaa authetication dot1x default group RADIUS-SERVER-DK !
dot1x system-auth-control aaa authetication dot1x default group RADIUS-SERVER-DK
interface GigabitEthernet 0/4 dot1x system-auth-control
switchport mode access ! Port must be an access port prior !
dot1x port-control auto ! to enable dot1x on the port interface GigabitEthernet 0/4
\end{txt} switchport mode access ! Port must be an access port prior
dot1x port-control auto ! to enable dot1x on the port
\end{cisco}
\section[SNMP]{Simple Network Management Protocol} \section[SNMP]{Simple Network Management Protocol}