Server AAA

[Quentinlock]

Hi ! I m trying to apply the AAA on my lab (cisco packet tracer) but even after have follow all the topic in the book, i m struggling.

If someone can help that will be great

All the ping work for reach the server or anything on the network

[Quentinlock]

Try with LOCKER /// KATRINA   locker /// katrina  CISCO /// CISCO as specified in AAA server and also used locker /// katrina in the database of R1

[luis_cordova]

Hi @Quentinlock ,

Try this:

aaa authentication login locker group tacacs+ <-- where locker is a authentication list name

line vty 0 4

no login authentication default

login authentication locker <-- where locker is a authentication list name

Regards

[Quentinlock]

When you said if it is an authentication list name (locker) you talk about if that it's refered in the server AAA ?

[Quentinlock]

Ok that doesnt work.

So the AAA mean Authentication Authorization Accounting. I have set two username and password in the server who is

LOCKER //// KATRINA
CISCO //// CISCO

When i try to ssh -l locker R1 , or LOCKER R1or CISCO R1, and then i use the password who normaly that shoud be. #Login invalide

[luis_cordova]

Hi @Quentinlock ,

Compress your exercise (winzip) and attach it for testing.

Regards

[Quentinlock]

Here i send the .pkt

All the information are on the top corner right for log inside different device

[luis_cordova]

Hi @Quentinlock ,

Make this change:

And do this:

After that change, everything is ok

Regards

[Quentinlock]

Ok i did, now when i m on R1 CLI, it asked me the password of console ( 2 )

But when i m on pc locker, and do the command ssh locker R1

nothing work

[Quentinlock]

So with the username LOCKER password KATRINA or CISCO //// CISCO

[Quentinlock]

I definitely don't understand at all how work AAA ^^.

So i changed the ip client, in the server.

I have open the prompt command on server as you did.

Set the ssh -l LOCKER 192.168.40.1
and try everypassword that can be (KATRINA,katrina,CISCO,1,2,3) and i still not have the permision to get in with SSH.

Thank you very much for your involve in my understanding.

[luis_cordova]

Hi @Quentinlock ,

I attached the exercise, I have proven that from all PCs the SSH is OK.

Regards

[luis_cordova]

Hi @Quentinlock ,

From the PCs you must enter the same command to enter:

C:\>ssh -l LOCKER 192.168.40.1

Regards

[Quentinlock]

I m sorry for this late answer. The format it's PNG and i can't open it with cisco packet tracer it say uncompatible version but i have the 7.2.1.0218