ccna 200-301: lab assessments certification

ccna 200-301: lab assessments certification.Step 6 To configure the key associated with the server, check the ConfigureKey check box and enter the key used to encrypt the traffic between the router and this server in the NewKey field. Enter the key again in the Confirm Key field to confirm. If this option is not used and no value is entered. the router uses the value configured in the AAAServers GlobalSettings window.Step 7 Click OK. for example, if the TACACS+ server IP address used is 10.0.1.1 and the key is TACACS+Pa55w0rd, the CCP will generate the CLI command tacacs-server host10.0.1.1 key TACACS+Pa55w0rd.3.4.2.2 List of configuration methods using CCP3.4 Server-Based AAA Authentication 75After AAA is enabled and the TACACS+ server is configured, you can configure the router to use the Cisco Secure ACS server to authenticate users to the router. To configure the router to use the Cisco Security ACS server for login authentication, you must create a user-defined list of authentication login methods or edit the list of default methods. It is important to remember that the default method list is automatically applied to all interfaces and lines except those to which the user-defined method list is explicitly applied. Administrators can use CCP to configure a user-defined list of authentication login methods.Step 1 On the CCP main page select Configure > Router > AAA > AuthenticationPolicies >Login o Step 2 In the AuthenticationLogin panel click Add. step 3 To create a new authentication login method, select User from the Name drop-down list Definedo Step 4 Enter the name of the authentication login method list in the Specify field, for example TACACS_SERVERo Step 5 Click Add to define the methods used by this policy, and the SelectMethodList(s) for AuthenticationLogin window appears o Step 6 Select from the list of methods grouptacacs+o Step 7 Click OK to add gro knock tacacs+ to the method list and return to the AddaMethodListforAuthenticationLogin window. Step 8 Click Add to add a backup method to this policy and the SelectMethod List(s) forAuthentication Login window appears. Step 9 Select enable from the method list to use the enable password as the backup login authentication method. Step 10 Click OK to add enable to the method list and return to the AddaMethodList forAuthenticationLogin window. Step 11 In the Deliver ConfigurationtoDevice window, click the Deliver button to send the configuration to the router. The CLI command generated by CCP is aaa authentication loginTACACS_SERVER group tacacs+ enable.3.4.2.3 Configuring a Line with a Method List Using CCPAfter you have created a list of authentication login methods, apply the list to the router's interfaces and lines. You can use CCP to apply an authentication policy to a router line. Step 1 Select Configure > Router > Router Access > VTY. step 2 Click the Edit button from the VTYLines window to change the VTY line. the EditVTYLines window appears. Step 3 Select the authentication policy to apply to the VTY line from the Authentication Policy list. For example 'The policy namedTACACS_SERVER authentication policy is applied to the VTY line 0. 4 The CLI command login authenticationTACACS_SERVERO can also be used in line configuration mode or interface configuration mode with the login authentication (default |list-name} command The authentication policy is applied to the line or interface through the CLI.3.4.3 Server-Based AAA Authentication Troubleshooting