Use ACS 5.2 to implement RADIUS Authentication

1. log on to acs5.2

650) This. width = 650; "Title =" 1.png" src = "http://s3.51cto.com/wyfs02/M01/4C/BB/wKioL1REqmbhCSieAARkjLY7lhQ675.jpg" alt = "wkiol1reqmbhcsie1_kjly7lhq675.jpg"/>

2. log on to the acs5.2 interface.

650) This. width = 650; "Title =" 2.png" src = "http://s3.51cto.com/wyfs02/M02/4C/BB/wKioL1REqnWTLh9fAAV82JAwmBo540.jpg" alt = "wkiol1reqnwtlh9faav82jawmbo540.jpg"/>

3. Click networkdevice group, Click location, go to the location page, and click Create to configure the location for the device to be authenticated (either configured or not, that is, define a location for the device)

650) This. width = 650; "Title =" 3.png" src = "http://s3.51cto.com/wyfs02/M02/4C/BB/wKiom1REqjqhMQE1AARLNhwczOs502.jpg" alt = "wkiom1reqjqhmqe11_lnhwczos502.jpg"/>

650) This. width = 650; "Title =" 4.png" src = "http://s3.51cto.com/wyfs02/M01/4C/BB/wKioL1REqpKQ7dtfAASLGiOsy6Q165.jpg" alt = "wkiol1reqpkq7dtfaaslgiosy6q165.jpg"/>

650) This. width = 650; "Title =" 5.png" src = "http://s3.51cto.com/wyfs02/M02/4C/BB/wKiom1REqlmghlDVAARNnerzReY059.jpg" alt = "wkiom1reqlmghldvaarnnerzrey059.jpg"/>

4. Click "devicetype" and then click "CREATE" to configure the device type for the device to authenticate. (You can configure or disable the device type to facilitate management)

650) This. width = 650; "Title =" 6.png" src = "http://s3.51cto.com/wyfs02/M01/4C/BB/wKiom1REqmrDbqXMAARZkY_i91E520.jpg" alt = "wkiom1reqmrdbqxmaarzky_i91e51_jpg"/>

650) This. width = 650; "Title =" 7.png" src = "http://s3.51cto.com/wyfs02/M00/4C/BC/wKioL1REqsWBbSUuAASm5GKVl7U487.jpg" alt = "wkiol1reqswbbsuuaasm5gkvl7u487.jpg"/>

650) This. width = 650; "Title =" 8.png" src = "http://s3.51cto.com/wyfs02/M02/4C/BC/wKioL1REqtPipmCYAARSSuZo5To214.jpg" alt = "wkiol1reqtpipmcyaarssuzo5to214.jpg"/>

5. Click networkdevice and AAA client and then click Create to create a network device that will provide authentication through the RADIUS service of ACS.

650) This. width = 650; "Title =" 9.png" src = "http://s3.51cto.com/wyfs02/M00/4C/BB/wKiom1REqpmh4Qm0AARqaDB-vJM339.jpg" alt = "wKiom1REqpmh4Qm0AARqaDB-vJM339.jpg"/>

Name: The name of a device. You can use the sysname of the device. Is a custom name

Location: Select indicates the device location defined above.

Device Type: select is the device type defined above.

IP Address: the original address for communications with ACS when the network device configures the radius.

Then select radius:

Share secret: the shared-key when the network device configures the radius

650) This. width = 650; "Title =" 10.png" src = "http://s3.51cto.com/wyfs02/M02/4C/BB/wKiom1REqqnR9wUtAALc5aLFlDA017.jpg" alt = "wkiom1reqqnr9wutaalc5alflda017.jpg"/>

6. Click User andidentity stores (configure the user and password used for telnet or SSH Login)

Click identitygroups: first, create the group

650) This. width = 650; "Title =" 11.png" src = "http://s3.51cto.com/wyfs02/M01/4C/BC/wKioL1REqwDwd-HXAAHLjIO04Rk607.jpg" alt = "wKioL1REqwDwd-HXAAHLjIO04Rk607.jpg"/>

7. Click Users to create the user and password used for telnet or SSH login.

Name: User Name

Password: logon Password

650) This. width = 650; "Title =" 12.png" src = "http://s3.51cto.com/wyfs02/M01/4C/BB/wKiom1REqsLRD3qTAAKmmcaBbH0905.jpg" alt = "wkiom1reqslrd3qtaakmmcabbh0905.jpg"/>

So far. Complete the simplest ACS configuration.

8. network device configuration process

Use templete to define the information of the RADIUS server (server address port, share-key, user-name format)

Radius-server template Test

Radius-server authentication10.1.1.110 1812

Undoradius-Server user-Name Domain-included

Enter AAA Configuration Mode

Aaa

Use templete to define authentication information (Authentication Mode)

Authentication-scheme Test

Authentication-mode radius

Enter the default-Admin Domain Binding authentication template and radius-server template (ThisDefault-AdminThe domain is the default domain of the system and is used for management. Therefore, Telnet, SSHThis default domain must be used when logging on to the device. It cannot be defined by yourself.)

Domain default_admin

Authentication-scheme Test

Radius-servertest

Enter the Authentication Mode of vty configuration device login to AAA (the default privilege is 0, so we need to configure privilege or configure super password to enhance the permission after login)

User-interface vty 0 4

Authentication-mode aaa

User Privilege level 15

Idle-timeout0 0

9. login demonstration

650) This. width = 650; "Title =" 13.png" src = "http://s3.51cto.com/wyfs02/M00/4C/BB/wKiom1REqu_AIbKxAAKFPKCkmD8765.jpg" alt = "wkiom1requ_aibkxaakfpkckmd8765.jpg"/>

Cloud start

Use ACS 5.2 to implement RADIUS Authentication