CCSP Cisco Secure PIX Firewall Advanced Exam Certification Guide, Second Edition [Electronic resources]

Greg Bastien; Earl Carter; Christian Degu

نسخه متنی -صفحه : 191/ 138
نمايش فراداده

  • Task 3: Configuring Authentication

    Incoming FTP connections to HQ-PIX are authenticated using the Terminal Access Controller Access Control System Plus (TACACS+) server located on the internal network. To use a TACACS+ server for authentication, you must first identify the IP address of the TACACS+ server and then indicate which connections will use the TACACS+ server. This configuration requires the following two steps:

    Step 1.

    Configure the TACACS+ server:

     aaa-server TACACS+ (inside) host 10.10.10.7 tacpass 
    

    Step 2.

    Configure authentication, authorization, and accounting (AAA) authentication for FTP access:

     aaa authentication include ftp inside 0.0.0.0 0.0.0.0 TACACS+ 
    

    Example 20-5 shows the TACACS+ configuration.

    Example 20-5. TACACS+ Configuration

    aaa-server TACACS+ (inside) host 10.10.10.7 tacpass
    aaa authentication include ftp inside 0.0.0.0 0.0.0.0 TACACS+