ccna 200-301 wikipedia

ccna 200-301 wikipedia.The TACACS+ and RADIUS protocols are used to communicate with AAA secure servers on the client side. Enabling AAA globally is a prerequisite for all other AAA commands. Use the aaa new-model command.Configuring a TACACS+ Server and Encryption KeysTo configure a TACACS+ server, use the tacacs-server host ip-address single-connection command.The keyword single-connection enhances TCP performance by maintaining only one TCP connection for the life of the session. Otherwise, one TCP connection is opened and closed for each session by default. If desired, you can define multiple TACACS+ servers by entering the IP addresses of multiple TACACS+ servers when using the tacacs-serverhost command.Next, use the tacacs-server key drawer) command to configure a shared key to encrypt the data transfer between the TACACS+ server and the AAA-enabled router. This key must be identical to the configuration on the router and the TACACS+ server. Configuring a RADIUS Server and Encryption KeyTo configure a RADIUS server, use the radius-server host ip-address command. Because RADIUS uses UDP, there is no keyword equivalent to single-connection. If desired, you can define multiple RADIUS servers by entering the radius-server host command for each server.To configure a shared key for encrypting passwords, use the radius-server key key command. This key must be exactly the same as the configuration on the router and RADIUS server. Consistent. Configuring Authentication to Use an AAA ServerAfter defining the AAA security server, the server must also be included in the method list for the aaa authentication login command74 Chapter 3 Authentication, Authorization, and Auditingin the aaa authentication login command list. AAA servers can be identified with the keyword group tacacs+ or group radius. For example, to configure a method list for the default login to use a RADIUS server, a TACACS+ server, or a * local username database for authentication, use the command aaa authentication login default group radius group tacacs+ local-case. Note: Some commands and modes have changed in IOS15, and although the commands here are still acceptable, administrators may see the following message.