AR1?配置:
更名R1配置GE0/0/0的IP地址为200.1.1.1/24
sysname R1
interface GigabitEthernet0/0/0
ip address 200.1.1.1 255.255.255.0
?AR2配置:
进入系统视图,更名R2并配置GE0/0/0的IP地址为200.1.1.2/24并设置默认路由
sysname R2
interface GigabitEthernet0/0/0
ip address 200.1.1.2 255.255.255.0
ip route-static 0.0.0.0 0.0.0.0 200.1.1.1
开启ftp,telnet,ssh服务的功能并设置用户默认工作目录
telnet server enable
ftp server enable
set default ftp-directory flash:
stelnet server enable
设置3A认证授权
aaa
authentication-scheme test1
authorization-scheme test2
domain ftp
authentication-scheme test1
authorization-scheme test2
domain telnet
authentication-scheme test1
authorization-scheme test2
domain ssh
authentication-scheme test1
authorization-scheme test2
local-user ftp1@ftp password cipher 123456
local-user ftp1@ftp privilege level 15
#设置权限为15
local-user ftp1@ftp ftp-directory flash:
local-user ftp1@ftp service-type ftp
local-user ssh1@ssh password cipher 123456
local-user ssh1@ssh privilege level 15
local-user ssh1@ssh service-type ssh
local-user telnet1@telnet password cipher 123456
local-user telnet1@telnet privilege level 3
local-user telnet1@telnet service-type telnet
开启vtp协议: ?
user-interface vty 0 4
authentication-mode aaa
protocol inbound all
测试telnet
?
?
?
|