10-laboratoriya ishi Mavzu: aaa serverda autentifikatsiya rejimini sozlash(radius, tacacs+). Ishdan maqsad

Topologiya

Firewall
ciscoasa(config)#interface vlan 1
ciscoasa(config-if)#no ip address
WARNING: DHCPD bindings cleared on interface 'inside', address pool removed
ciscoasa(config-if)#ip address 192.168.4.1 255.255.255.0
ciscoasa(config-if)#security-level 100
ciscoasa(config-if)#exit
ciscoasa(config)#interface vlan 2
ciscoasa(config-if)#ip address 4.4.4.3 255.255.255.248
ciscoasa(config-if)#security-level 0
ciscoasa(config)#route outside 0.0.0.0 0.0.0.0 4.4.4.4
ciscoasa(config)#class-map inspeksiya
ciscoasa(config-cmap)#?
ciscoasa(config-cmap)#match default-inspection-traffic
ciscoasa(config-cmap)#exit
ciscoasa(config)#policy-map siyosat
ciscoasa(config-pmap)#class inspeksiya
ciscoasa(config-pmap-c)#inspect icmp
ciscoasa(config-pmap-c)#inspect dns
ciscoasa(config-pmap-c)#inspect http
ciscoasa(config-pmap-c)#exit
ciscoasa(config)#service-policy siyosat global
ciscoasa(config)#object network for-nat
ciscoasa(config-network-object)#subnet 0.0.0.0 0.0.0.0
ciscoasa(config-network-object)#nat (inside,outside) dynamic interface
ciscoasa(config-network-object)#exit

Routerga
Router(config)#interface fastEthernet 0/0
Router(config-if)#no sh

Router(config-if)#ip address 8.8.8.1 255.255.255.0

Router(config-if)#exit
Router(config)#interface fastEthernet 0/1
Router(config-if)#no sh
Router(config-if)#ip address 4.4.4.4 255.255.255.248
Router(config-if)#exit
Server ip berish

Kompyuterlarga IP beramiz