Here is a sample of AAA configuration for switches and routers: 1)   AAA Authentication Here is a sample config for AAA authentication including banner and TACACS+ server. enable secret CISCO ! aaa new-model aaa authentication password-prompt "Password:" aaa authentication username-prompt "Username:" aaa authentication login CONSOLE local aaa authentication login VTY group tacacs+ local aaa authentication enable default group tacacs+ enable ! username ADMIN password 0 CISCO tacacs-server host 1.1.1.1 tacacs-server directed-request tacacs-server key CISCO ! line con 0 login authentication CONSOLE line vty 0 4 password CISCO login authentication VTY 2)   AAA authorization Here is a aaa authorization to access exec using TACACS+ aaa new-model aaa authorization console aaa authorization exec default none aaa authorization exec CONSOLE group tacacs+ local aaa authorization exec VTY group tacacs+ if-authenticated line con 0 authorization exec CONSOLE line vty 0 4 authorization exec VTY 3)   AAA command authorization Here is config sample so users with privillage 7 could access only following commnands: privilege exec level 7 configure terminal privilege exec level 7 debug ip rip privilege exec level 7 undebug all privilege exec level 7 show running-config privilege configure level 7 interface privilege interface level 7 shutdown privilege interface level 7 no shutdown privilege interface all level 7 ip ... View more

Here you can find a few samples of RIPv2 configuration: 1. "Clear Text" RIPv2 authentication int fa0/0 ip rip authentication key-chain CISCO ! key chain CISCO key 1    key-string CISCO    accept-lifetime local 00:07:00 Mar 1 2002 infinite    send-lifetime local 00:07:00 Mar 1 2002 infinite 2. MD5 RIPv2 authentication int fa0/0 ip rip authentication mode md5 ip rip authentication key-chain CISCO ! key chain CISCO key 1    key-string CISCO    accept-lifetime local 00:07:00 Mar 1 2002 infinite    send-lifetime local 00:07:00 Mar 1 2002 infinite 3. Filtering routes that router sends to their neighbors router rip distribute-list 10 in FastEthernet0/0 ! access-list 10 deny   150.1.0.0 0.0.255.255 access-list 10 permit any 4. Default route Router will send Default Route on Serial 1/0 interface, but only if it has 172.68.16.0/24 route in routing table. router rip version 2 network 172.68.16.0 default-information originate route-map condition ! route-map condition permit 10 match ip address 10 set interface s1/0 ! access-list 10 permit 172.68.16.0 0.0.0.255 ... View more