防火墙技术实验报告范本

1、防火墙技术实验报告时间：2012-03-13实验名称：简单的AAA配置班级计算机网络技术100#姓名#实验内容1、拓扑图:fo/o：ip:192.16B.2.254/24ClientNAS1/0-fO/Dip: 192. 168. 139.26-(/24Cl/ fi/nip：192-168-2- 2/24 gv： 192. 168.2. 254/24在VKvare内褐塗一自巧讪0吧脂务丢ip： 192- 16B. 139. V24 gv：192-I6S. 13此 254/242、实验设备：1) .用一台PC机桥接到VMware内win server2003服务器;2) .用两台 Router

2、c3600，台做 NAS、一台做 Client ；3、实验步骤：NAS :NAS(co nfig)# int f1/0NAS(co nfig-if)#ip add 192.168.139.254 255.255.255.0NAS(co nfig-if)# no shutNAS(co nfig)# int f0/0NAS(co nfig-if)#ip add 192.168.2.254 255.255.255.0NAS(co nfig-if)# no shut配置enable密码NAS(c on fig)#user name cisco privilege 15 password ciscoNA

3、S(c on fig)#e nable secret ciscoNAS(c on fig)#aaa n ew-model开启AAA功能NAS(c on fig)#aaa authe n login NAS(c on fig)#aaa authe n login NAS(co nfig)#l ine vty 0 15 NAS(co nfig-li ne)#login authen NAS(co nfig-li ne)#exiNAS(co nfig)#l ine con 0cisco group tacacs+ locallhy noneciscoNAS(co nfig-li ne)#log in

4、 authe nticati onlhy-配置共享key-NAS(co nfig-li ne)#exiNAS(co nfig)#tacacs-server host 192.168.139.4 key ciscoClie nt:Clie nt(co nfig)#i nt f0/0Client(config-if)#ip add 192.168.2.2 255.255.255.0Clie nt(c on fig-if)# no shutClie nt(con fig)# no ip routi ngClient(config)#ip default-gateway 192.168.2.254Cl

5、ie nt#pi ng 192.168.139.254Type escape seque nee to abort.Sending 5, 100-byte ICMP Echos to 192.168.139.254, timeout is 2 seco nds:!在VMware中配置:List users beginning withletter/number:ABCDEFGHIJKLNN0PQRSTUVVXY2一0一 1 一 2一3 一4一5一6一7飞一9 一Real Name Description |ccnp|Shared Profile Components圈1齬Ge up Setup

6、 Shared Profile ComponentsNetwork ConfiourtionSupplementary User InfoccnpCiscoSecure PAP (Also used for CHAP/MS-CHAP/ARAP, if the Separate厂 RoutingrEnabledlote: PPP LCP vill be 3irtoatically enabled if this service is enabledEnable Optionsa No Enable Privilege r Max Privilege for any AAAClientJJ%NAS

7、NAS#test aaa group tacacs+Tryi ng to authe nticate with Servergroup tacacs+Sending password认证成功User successfully authe nticatedNAS#NAS(c on fig)#aaa authe nticati on en able default group tacacs+Shared ProfileCompionentsShared Ppfiffe CompoMntfNtrorlcConf ignirat ionAnt hent 1 catUsing192.108, 139.2

8、54Single Conneel TACACS4 AAA Client1CS+ (Cisco IOS)Advanced Configuration OptionsAAA Client IP Addresscisco cisco n ew-code誉1 Confi gurati cmAdvanted TAC AC 3+ Features181粼t-onfigyritinF=u I lot ?rfac?IConfIgpratIonSyst *mDisplay a Time-of-Day access grid for every TACACS+ service where you can over

9、ride the default Tiirie-of-Day settingsDisplay a window for each SRrvi c.p. 口冃;总讨 i r whi vntiAAA Client HostnameAAA Client IPAddressAuthenticatUsing广f CISCO192.168.139. 254TACACS-+(Cisco I2lAdd Entry丽GrupStup%IProfilesaMet vork Conf iigurat iona$0 Eim Conf igurat ionr=n. I M Efface1世1 Conf iurtJenD

10、将enable加入AAA认证中NAS(c on fig)#aaa authorizati on exec default group tacacs+默认审计方NAS(c on fig)#aaa acco unting exec default start-stop group tacacs+式NAS(c on fig)#aaa acco un ti ng comma nds 15 default start-stop group tacacs+命令审计方式Clie nt:将enable加入AAA认证里的验证结果：lien t#te Inet 192.168.139.254Tryi ng 192

11、.168.139.254 . Ope nUser Access Verificatio nUsern ame: ciscoPassword:NASenPassword:NAS#co nf tNAS(co nfig-if)#e nd验证成功NAS#exiConnection to 192.168.139.254 closed by foreign hostClie nt#授权(authorization )验证结果：Clie nt#te Inet 192.168.139.254Tryi ng 192.168.139.254 . Ope nUsern ame: ciscoPassword:NAS#

12、直接进入特权模式NAS#co nf tNAS(co nfig)#exiNAS#exi授权成功Connection to 192.168.139.254 closed by foreign hostClie nt#审计(accounting ) 用 default 验证：Clie nt#te Inet 192.168.139.254Tryi ng 192.168.139.254 . Ope nUsern ame: ciscoPassword:NAS#co nf tEn ter con figurati on comma nds, one per line.End with CNTL/Z.NAS(

13、co nfig)#e ndNAS#sh runnin g-c onfigNAS#sh versionNAS#exiConnection to 192.168.139.254 closed by foreign hostClie nt#审计(acco un ti ng ) 用 comma nds 验证：Clie nt#te Inet 192.168.139.254Tryi ng 192.168.139.254 . Ope nUsern ame: ciscoPassword:NAS#co nf tEn ter con figurati on comma nds, one per line.End

14、with CNTL/Z.NAS(co nfig)#exiNAS#sh runnin g-c onfigNAS#sh versionNAS#co nf tEn ter con figurati on comma nds, one per line.End with CNTL/Z.NAS(co nfig)#i nt Io 0NAS(co nfig-if)#ip add 222.2 255.255.255.0NAS(co nfig-if)#exiNAS(co nfig)#exiNAS#exiConnection to 192.168.139.254 closed by foreign hostCli

15、e nt#实验结果：审计(accounting )用default验证的结果：冈Reports and ActivitySriTiMiReportsB验证的结果Reports and ActivityReportsRportj*id实验心得感觉还不错SMrtd P-cfieCcimpnfiri+ BLhfr S?tupGoup S*tMpExternal UserSystem ConfigirationAdminiftratian CuillrOlAmmieratieh Cc ntrolNet worse Conf lgirt ionGroupSetupC*nf igu*3ti-snK4 Sf

16、tTEMtInlerfw#ConfigtratiDn5lur t-d Pr 0T1I9ComponentsVoIP Accovir-t in：审计（accountingwortCcnffurjifon用 comma ndsTACACS+ Accounting 烈ctive_ csvD RErmh DownloadExt#rril UftrQ咸dba玮sSstrmCcnfigurationUser；NameGrou NameTAO寫+ 、AccountingTACACS+ Accunt ing面* KAJJinSKdccuntingLtiggEdin Umei:总川如7初A. r-wnY長-、A

17、CS Backun KndPassedAuthEiit i.c逗 ticinmLdERgQkin 匚与;rDisabled At countsACS Backup And丸didnist rati os 磁PIUS hgciLintingXuthenticationsSpIpcT制PCTSelectDate MM V llLIDEUcer-NameGroup- NaneCaller-IdAcct Flagsel aps03/14/201220:12:51ciscoDefault Group1S2.168. 2.2stop4S03/1 1S2. 163. 2.2ct art 03/14/201220:ie：34DefaultCroupip address2. 2.2. 2255.255+ 255 0IS303/14/2012 20:16:34ciscoDefaultGrouri