http://docwiki.cisco.com/w/index.php?title=TACACS%2B_Over_IPv6_Transport_Configuration_Example&feed=atom&action=history
TACACS+ Over IPv6 Transport Configuration Example - Revision history
2013-05-21T15:52:56Z
Revision history for this page on the wiki
MediaWiki 1.16.0
http://docwiki.cisco.com/w/index.php?title=TACACS%2B_Over_IPv6_Transport_Configuration_Example&diff=42527&oldid=prev
Ayourtch: /* Introduction */
2011-09-30T19:08:36Z
<p><span class="autocomment">Introduction</span></p>
<table style="background-color: white; color:black;">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr valign='top'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 19:08, 30 September 2011</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 4:</td>
<td colspan="2" class="diff-lineno">Line 4:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>==Introduction==</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>==Introduction==</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'>-</td><td style="background: #ffa; color:black; font-size: smaller;"><div>This example is intended to show a sample configuration of TACACS+ over IPv6 transport. </div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>This example is intended to show a sample configuration of TACACS+ over IPv6 transport<ins class="diffchange diffchange-inline">, described in </ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins class="diffchange diffchange-inline">http://www</ins>.<ins class="diffchange diffchange-inline">cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-adsl_dial.html#wp1101974</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>==Design==</div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>==Design==</div></td></tr>
</table>
Ayourtch
http://docwiki.cisco.com/w/index.php?title=TACACS%2B_Over_IPv6_Transport_Configuration_Example&diff=42526&oldid=prev
Ayourtch: /* Show running-config */
2011-09-30T19:04:10Z
<p><span class="autocomment">Show running-config</span></p>
<table style="background-color: white; color:black;">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr valign='top'>
<td colspan='2' style="background-color: white; color:black;">← Older revision</td>
<td colspan='2' style="background-color: white; color:black;">Revision as of 19:04, 30 September 2011</td>
</tr><tr><td colspan="2" class="diff-lineno">Line 197:</td>
<td colspan="2" class="diff-lineno">Line 197:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>! </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>! </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>! </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>! </div></td></tr>
<tr><td class='diff-marker'>-</td><td style="background: #ffa; color:black; font-size: smaller;"><div>license udi pid CISCO1941/K9 sn <del class="diffchange diffchange-inline">FTX140980GP </del> </div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>license udi pid CISCO1941/K9 sn <ins class="diffchange diffchange-inline">XXXXXXXXXX </ins> </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>license boot module c1900 technology-package securityk9 </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>license boot module c1900 technology-package securityk9 </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>license boot module c1900 technology-package datak9 </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>license boot module c1900 technology-package datak9 </div></td></tr>
<tr><td colspan="2" class="diff-lineno">Line 203:</td>
<td colspan="2" class="diff-lineno">Line 203:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>! </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>! </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>username ayourtch privilege 15 password 0 cisco123 </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>username ayourtch privilege 15 password 0 cisco123 </div></td></tr>
<tr><td class='diff-marker'>-</td><td style="background: #ffa; color:black; font-size: smaller;"><div><del style="color: red; font-weight: bold; text-decoration: none;">username jgriviau privilege 15 password 0 cisco123 </del></div></td><td colspan="2"> </td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>! </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>! </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>redundancy </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>redundancy </div></td></tr>
<tr><td colspan="2" class="diff-lineno">Line 277:</td>
<td colspan="2" class="diff-lineno">Line 276:</td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>line vty 5 100 </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>line vty 5 100 </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> login authentication FOO </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> login authentication FOO </div></td></tr>
<tr><td class='diff-marker'>-</td><td style="background: #ffa; color:black; font-size: smaller;"><div> transport input ssh <del class="diffchange diffchange-inline"> </del></div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div> transport input ssh <ins class="diffchange diffchange-inline"> </ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>line vty 101 200 </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div>line vty 101 200 </div></td></tr>
<tr><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> login authentication LCL </div></td><td class='diff-marker'> </td><td style="background: #eee; color:black; font-size: smaller;"><div> login authentication LCL </div></td></tr>
</table>
Ayourtch
http://docwiki.cisco.com/w/index.php?title=TACACS%2B_Over_IPv6_Transport_Configuration_Example&diff=42525&oldid=prev
Ayourtch: A very first version of the config.
2011-09-30T19:02:24Z
<p>A very first version of the config.</p>
<p><b>New page</b></p><div>{{Template:Required Metadata}}<br />
{{Template:Metadata IPv6 Config Example}}<br />
<br />
==Introduction==<br />
<br />
This example is intended to show a sample configuration of TACACS+ over IPv6 transport. <br />
<br />
==Design==<br />
<br />
For the purposes of the configuration, we will have a host with the mac address 00:0c:01:02:03:04 attached to the interface GigabitEthernet0/1 - the same host will run the TACACS+ server and also be used as a source host to SSH to the router.<br />
<br />
<!--Describe any setup details of this configuration and include a topology--><br />
<br />
<!-- [[Image:sample_topology.jpg]] --><br />
<br />
==Configuration==<br />
<br />
This configuration does *not* correspond 100% to a production configuration in the places other than TACACS+ configuration - for example, the password encryption would need to be turned on. Use this configuration only as a base start off with. <br />
<br />
<!--Provide any steps, tips, or suggestions to setting up this configuration successfully--><br />
<br />
==Related show Commands==<br />
This section provides information you can use to confirm your configuration is working properly.<br />
<br />
Certain show commands are supported by the [https://www.cisco.com/cgi-bin/Support/OutputInterpreter/home.pl Output Interpreter Tool (registered customers only)], which allows you to view an analysis of show command output.<br />
<br />
<!--Add steps to verify that the config is working, including which show commands to use--><br />
<pre><br />
1941-01#sh deb <br />
General OS: <br />
TACACS access control debugging is on <br />
TACACS+ events debugging is on <br />
TACACS+ packets debugging is on <br />
AAA Authentication debugging is on <br />
AAA Authorization debugging is on <br />
<br />
1941-01# <br />
Sep 30 19:07:17.307: AAA/BIND(00000012): Bind i/f <br />
Sep 30 19:07:19.307: AAA/AUTHEN/LOGIN (00000012): Pick method list 'FOO' <br />
Sep 30 19:07:19.307: TPLUS: Queuing AAA Authentication request 18 for processing<br />
Sep 30 19:07:19.307: TPLUS: processing authentication start request id 18 <br />
Sep 30 19:07:19.307: TPLUS: Authentication start packet created for 18(cisco) <br />
Sep 30 19:07:19.307: TPLUS: Using server 2001:DB8::20C:1FF:FE02:304 <br />
Sep 30 19:07:19.307: TPLUS(00000012)/0/NB_WAIT/31730500: Started 5 sec timeout <br />
Sep 30 19:07:19.307: TPLUS(00000012)/0/NB_WAIT: socket event 2 <br />
Sep 30 19:07:19.307: T+: Version 192 (0xC0), type 1, seq 1, encryption 1 <br />
Sep 30 19:07:19.307: T+: session_id 1018492586 (0x3CB4F6AA), dlen 45 (0x2D) <br />
Sep 30 19:07:19.307: T+: type:AUTHEN/START, priv_lvl:1 action:LOGIN ascii <br />
Sep 30 19:07:19.307: T+: svc:LOGIN user_len:5 port_len:6 (0x6) raddr_len:26 (0x0<br />
Sep 30 19:07:19.307: T+: user: cisco <br />
Sep 30 19:07:19.307: T+: port: tty132 <br />
Sep 30 19:07:19.307: T+: rem_addr: 2001:DB8::20C:1FF:FE02:304 <br />
Sep 30 19:07:19.307: T+: data: <br />
Sep 30 19:07:19.307: T+: End Packet <br />
Sep 30 19:07:19.307: TPLUS(00000012)/0/NB_WAIT: wrote entire 57 bytes request <br />
Sep 30 19:07:19.307: TPLUS(00000012)/0/READ: socket event 1 <br />
Sep 30 19:07:19.307: TPLUS(00000012)/0/READ: Would block while reading <br />
Sep 30 19:07:19.307: TPLUS(00000012)/0/READ: socket event 1 <br />
Sep 30 19:07:19.307: TPLUS(00000012)/0/READ: read entire 12 header bytes (expec)<br />
Sep 30 19:07:19.307: TPLUS(00000012)/0/READ: socket event 1 <br />
Sep 30 19:07:19.307: TPLUS(00000012)/0/READ: read entire 37 bytes response <br />
Sep 30 19:07:19.307: T+: Version 192 (0xC0), type 1, seq 2, encryption 1 <br />
Sep 30 19:07:19.307: T+: session_id 1018492586 (0x3CB4F6AA), dlen 25 (0x19) <br />
Sep 30 19:07:19.307: T+: AUTHEN/REPLY status:5 flags:0x1 msg_len:19, data_len:0 <br />
Sep 30 19:07:19.307: T+: msg: Welcome 0x0A 0x0A Password: <br />
Sep 30 19:07:19.307: T+: data: <br />
Sep 30 19:07:19.307: T+: End Packet <br />
Sep 30 19:07:19.307: TPLUS(00000012)/0/31730500: Processing the reply packet <br />
Sep 30 19:07:19.307: TPLUS: Received authen response status GET_PASSWORD (8)<br />
<br />
! ---- The ssh session emits the "password:" prompt and awaits for the password to be entered.<br />
<br />
Sep 30 19:07:32.107: TPLUS: Queuing AAA Authentication request 18 for processing<br />
Sep 30 19:07:32.107: TPLUS: processing authentication continue request id 18 <br />
Sep 30 19:07:32.107: TPLUS: Authentication continue packet generated for 18 <br />
Sep 30 19:07:32.107: TPLUS(00000012)/0/WRITE/31730500: Started 5 sec timeout <br />
Sep 30 19:07:32.107: T+: Version 192 (0xC0), type 1, seq 3, encryption 1 <br />
Sep 30 19:07:32.107: T+: session_id 1018492586 (0x3CB4F6AA), dlen 10 (0xA) <br />
Sep 30 19:07:32.107: T+: AUTHEN/CONT msg_len:5 (0x5), data_len:0 (0x0) flags:0x0<br />
Sep 30 19:07:32.107: T+: User msg: <elided> <br />
Sep 30 19:07:32.107: T+: User data: <br />
Sep 30 19:07:32.107: T+: End Packet <br />
Sep 30 19:07:32.107: TPLUS(00000012)/0/WRITE: wrote entire 22 bytes request <br />
Sep 30 19:07:32.107: TPLUS(00000012)/0/READ: socket event 1 <br />
Sep 30 19:07:32.107: TPLUS(00000012)/0/READ: read entire 12 header bytes (expec)<br />
Sep 30 19:07:32.107: TPLUS(00000012)/0/READ: socket event 1 <br />
Sep 30 19:07:32.107: TPLUS(00000012)/0/READ: read entire 18 bytes response <br />
Sep 30 19:07:32.107: T+: Version 192 (0xC0), type 1, seq 4, encryption 1 <br />
Sep 30 19:07:32.107: T+: session_id 1018492586 (0x3CB4F6AA), dlen 6 (0x6) <br />
Sep 30 19:07:32.107: T+: AUTHEN/REPLY status:1 flags:0x0 msg_len:0, data_len:0 <br />
Sep 30 19:07:32.107: T+: msg: <br />
Sep 30 19:07:32.107: T+: data: <br />
Sep 30 19:07:32.107: T+: End Packet <br />
Sep 30 19:07:32.107: TPLUS(00000012)/0/31730500: Processing the reply packet <br />
Sep 30 19:07:32.107: TPLUS: Received authen response status PASS (2) <br />
Sep 30 19:07:32.111: AAA/AUTHOR (00000012): Method list id=0 not configured. Skr<br />
1941-01# <br />
1941-01# <br />
1941-01# <br />
1941-01# <br />
Sep 30 19:07:38.627: AAA/AUTHOR: auth_need : user= 'cisco' ruser= '1941-01'rem_'<br />
Sep 30 19:07:38.627: AAA: parse name=tty132 idb type=-1 tty=-1 <br />
Sep 30 19:07:38.627: AAA: name=tty132 flags=0x11 type=5 shelf=0 slot=0 adapter=0<br />
Sep 30 19:07:38.627: AAA/MEMORY: create_user (0x296F9D2C) user='cisco' ruser='N)<br />
Sep 30 19:07:38.627: AAA/AUTHEN/START (3968405663): port='tty132' list='' actioE<br />
Sep 30 19:07:38.627: AAA/AUTHEN/START (3968405663): console enable - default to)<br />
Sep 30 19:07:38.627: AAA/AUTHEN/START (3968405663): Method=ENABLE <br />
Sep 30 19:07:38.627: AAA/AUTHEN (3968405663): status = GETPASS <br />
<br />
! ---- incorrect enable password is entered<br />
<br />
Sep 30 19:07:43.447: AAA/AUTHEN/CONT (3968405663): continue_login (user='(undef)<br />
Sep 30 19:07:43.447: AAA/AUTHEN (3968405663): status = GETPASS <br />
Sep 30 19:07:43.447: AAA/AUTHEN/CONT (3968405663): Method=ENABLE <br />
Sep 30 19:07:43.451: AAA/AUTHEN(3968405663): password incorrect <br />
Sep 30 19:07:43.451: AAA/AUTHEN (3968405663): status = FAIL <br />
Sep 30 19:07:43.451: AAA/MEMORY: free_user (0x296F9D2C) user='NULL' ruser='NULL)<br />
Sep 30 19:07:43.451: %SYS-5-PRIV_AUTH_FAIL: Authentication to privilege level 1)<br />
1941-01# <br />
1941-01# <br />
1941-01# <br />
Sep 30 19:07:48.487: AAA/AUTHOR: auth_need : user= 'cisco' ruser= '1941-01'rem_'<br />
Sep 30 19:07:48.491: AAA: parse name=tty132 idb type=-1 tty=-1 <br />
Sep 30 19:07:48.491: AAA: name=tty132 flags=0x11 type=5 shelf=0 slot=0 adapter=0<br />
Sep 30 19:07:48.491: AAA/MEMORY: create_user (0x313CD830) user='cisco' ruser='N)<br />
Sep 30 19:07:48.491: AAA/AUTHEN/START (1229564639): port='tty132' list='' actioE<br />
Sep 30 19:07:48.491: AAA/AUTHEN/START (1229564639): console enable - default to)<br />
Sep 30 19:07:48.491: AAA/AUTHEN/START (1229564639): Method=ENABLE <br />
Sep 30 19:07:48.491: AAA/AUTHEN (1229564639): status = GETPASS <br />
<br />
! --- The correct enable password is entered this time<br />
<br />
Sep 30 19:07:54.947: AAA/AUTHEN/CONT (1229564639): continue_login (user='(undef)<br />
Sep 30 19:07:54.947: AAA/AUTHEN (1229564639): status = GETPASS <br />
Sep 30 19:07:54.947: AAA/AUTHEN/CONT (1229564639): Method=ENABLE <br />
Sep 30 19:07:54.951: AAA/AUTHEN (1229564639): status = PASS <br />
Sep 30 19:07:54.951: AAA/MEMORY: free_user (0x313CD830) user='NULL' ruser='NULL)<br />
1941-01# <br />
</pre><br />
<br />
==Show running-config==<br />
<br />
<pre><br />
Current configuration : 2781 bytes <br />
! <br />
! Last configuration change at 18:55:35 UTC Fri Sep 30 2011 by ayourtch <br />
version 15.2 <br />
service timestamps debug datetime msec <br />
service timestamps log datetime msec <br />
no service password-encryption <br />
! <br />
hostname 1941-01 <br />
! <br />
boot-start-marker <br />
boot system flash flash:/c1900-universalk9-mz.SPA.152-1.T <br />
boot-end-marker <br />
! <br />
! <br />
enable secret 5 $1$nJGe$kj6JHz6Inhq1UN883NX7n1 <br />
! <br />
aaa new-model <br />
! <br />
! <br />
aaa group server tacacs+ FOO <br />
server name FOO <br />
! <br />
aaa authentication login default local enable none <br />
aaa authentication login FOO group FOO <br />
aaa authentication login LCL local enable none <br />
! <br />
! <br />
! <br />
! <br />
! <br />
aaa session-id common <br />
! <br />
! <br />
ipv6 unicast-routing <br />
ipv6 cef <br />
ip auth-proxy max-login-attempts 5 <br />
ip admission max-login-attempts 5 <br />
! <br />
! <br />
! <br />
ip dhcp pool INT2 <br />
network 192.168.2.0 255.255.255.0 <br />
dns-server 144.254.10.123 64.103.101.184 144.254.71.184 <br />
! <br />
! <br />
no ip domain lookup <br />
ip domain name cisco.com <br />
ip cef <br />
! <br />
multilink bundle-name authenticated <br />
! <br />
crypto pki token default removal timeout 0 <br />
! <br />
! <br />
license udi pid CISCO1941/K9 sn FTX140980GP <br />
license boot module c1900 technology-package securityk9 <br />
license boot module c1900 technology-package datak9 <br />
! <br />
! <br />
username ayourtch privilege 15 password 0 cisco123 <br />
username jgriviau privilege 15 password 0 cisco123 <br />
! <br />
redundancy <br />
! <br />
! <br />
! <br />
! <br />
! <br />
! <br />
! <br />
! <br />
! <br />
! <br />
! <br />
! <br />
! <br />
! <br />
interface Embedded-Service-Engine0/0 <br />
no ip address <br />
shutdown <br />
! <br />
interface GigabitEthernet0/0 <br />
no ip address <br />
ip virtual-reassembly in <br />
load-interval 30 <br />
duplex auto <br />
speed auto <br />
no cdp enable <br />
! <br />
interface GigabitEthernet0/1 <br />
ip address 192.168.2.1 255.255.255.0 <br />
ip nbar protocol-discovery <br />
ip virtual-reassembly in <br />
load-interval 30 <br />
duplex auto <br />
speed auto <br />
ipv6 address 2001:DB8::2/64 <br />
! <br />
ip forward-protocol nd <br />
! <br />
no ip http server <br />
no ip http secure-server <br />
! <br />
! <br />
! <br />
! <br />
! <br />
! <br />
tacacs server FOO <br />
address ipv6 2001:DB8::20C:1FF:FE02:304 <br />
key cisco123 <br />
port 4949 <br />
! <br />
! <br />
! <br />
control-plane <br />
! <br />
! <br />
! <br />
line con 0 <br />
exec-timeout 0 0 <br />
line aux 0 <br />
line 2 <br />
no activation-character <br />
no exec <br />
transport preferred none <br />
transport input all <br />
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh <br />
stopbits 1 <br />
line vty 0 4 <br />
login authentication FOO <br />
transport input ssh <br />
line vty 5 100 <br />
login authentication FOO <br />
transport input ssh <br />
line vty 101 200 <br />
login authentication LCL <br />
transport input telnet <br />
! <br />
scheduler allocate 20000 1000 <br />
end <br />
<br />
</pre><br />
<br />
==Related Information==<br />
[http://www.cisco.com/web/psa/products/index.html Technical Support & Documentation - Cisco Systems]<br />
<br />
<!--List links to related information--><br />
<br />
[[Category:IPv6 Configuration Examples]]</div>
Ayourtch