防火墙技术实验报告范本13385.docx

《防火墙技术实验报告范本13385.docx》由会员分享，可在线阅读，更多相关《防火墙技术实验报告范本13385.docx（10页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、防火墙技术术实验报报告时间：20012-03-13实验名称：简单的AAAA配置置班 级计算机网络络技术1100#姓名#实验内容1、拓扑图图：2、实验设设备：1).用一一台PCC机桥接接到VMMwarre内wwin serrverr20003服务务器；2).用两两台Roouteer cc36000，一一台做NNAS、一一台做CClieent；3、实验步步骤：NAS：NAS(cconffig)#innt ff1/00NAS(cconffig-if)#ipp addd 1192.168.1139.2544 2555.2255.2555.0NAS(cconffig-if)#noo shhutNAS(c

2、conffig)#innt ff0/00NAS(cconffig-if)#ipp addd 1192.1688.2.2544 2555.2255.2555.0NAS(cconffig-if)#noo shhutNAS(cconffig)#ussernnamee ciiscoo prriviilegge 115 ppasssworrd ccisccoNAS(cconffig)#ennablle ssecrret cissco -配置置enaablee密码-NAS(cconffig)#aaaa nnew-moddel -开启启AAAA功能-NAS(cconffig)#aaaa aauthhen l

3、oggin cissco grooup taccacss+ llocaalNAS(cconffig)#aaaa aauthhen loggin lhyy nooneNAS(cconffig)#liine vtyy 0 15NAS(cconffig-linne)#loggin autthenn ciiscooNAS(cconffig-linne)#exiiNAS(cconffig)#linne ccon 0NAS(cconffig-linne)#loggin autthennticcatiion lhyyNAS(cconffig-linne)#exiiNAS(cconffig)#taacaccs

4、-sservver hosst 1192.1688.1339.44 keey cciscco -配配置共享享keyy-Cliennt:Cliennt(cconffig)#innt ff0/00Cliennt(cconffig-if)#ipp addd 1192.1688.2.2 2255.2555.2555.00Cliennt(cconffig-if)#noo shuttCliennt(cconffig)#noo ipp rooutiing Cliennt(cconffig)#ipp deefauult-gattewaay 1192.1688.2.2544Cliennt#ppingg 1992

5、.1168.1399.2554Type esccapee seequeencee too abbortt.Sendiing 5, 1000-byyte ICMMP EEchoos tto 1192.1688.1339.2254, tiimeoout is 2 ssecoondss:!在VMwaare中中配置：NAS:NAS#ttestt aaaa ggrouup ttacaacs+ ciiscoo ciiscoo neew-ccodee Tryinng tto aauthhentticaate witth SServverggrouup ttacaacs+Sendiing passswoord

6、User succcesssfuullyy auutheentiicatted -认证证成功-NAS#NAS(cconffig)#aaaa aauthhentticaatioon eenabble deffaullt ggrouup ttacaacs+ -将将enaablee加入AAAA认认证中-NAS(cconffig)#aaaa aauthhoriizattionn exxec deffaullt ggrouup ttacaacs+ NAS(cconffig)#aaaa aaccoounttingg exxec deffaullt sstarrt-sstopp grroupp taacac

7、cs+ -默默认审计计方式-NAS(cconffig)#aaaa aaccoounttingg coommaandss 155 deefauult staart-stopp grroupp taacaccs+ -命令审计计方式-Cliennt:将enabble加加入AAAA认证证里的验验证结果果：lientt#teelneet 1192.1688.1339.2254Tryinng 1192.1688.1339.2254 . OppenUser Acccesss VeerifficaatioonUsernnamee: ccisccoPasswwordd: NASeenPasswwordd: NA

8、S#cconff tNAS(cconffig-if)#enndNAS#eexi -验验证成功功-Connnecttionn too 1992.1168.1399.2554 cclossed by forreiggn hhosttCliennt#授权（auuthoorizzatiion）验验证结果果：Cliennt#ttelnnet 1922.1668.1139.2544Tryinng 1192.1688.1339.2254 . OppenUsernnamee: ccisccoPasswwordd: NAS# -直直接进入入特权模模式-NAS#cconff tNAS(cconffig)#exxi

9、NAS#eexiConnnecttionn too 1992.1168.1399.2554 cclossed by forreiggn hhosttCliennt# -授权成功功-审计（acccouuntiing）用用deffaullt验证证：Cliennt#ttelnnet 1922.1668.1139.2544Tryinng 1192.1688.1339.2254 . OppenUsernnamee: ccisccoPasswwordd: NAS#cconff tEnterr coonfiigurratiion commmannds, onne pper linne. Ennd wwith

10、h CNNTL/Z.NAS(cconffig)#enndNAS#ssh rrunnningg-coonfiig NAS#ssh vverssionn NAS#eexiConnnecttionn too 1992.1168.1399.2554 cclossed by forreiggn hhosttCliennt#审计（acccouuntiing）用用commmannds验验证：Cliennt#ttelnnet 1922.1668.1139.2544Tryinng 1192.1688.1339.2254 . OppenUsernnamee: ccisccoPasswwordd: NAS#ccon

11、ff tEnterr coonfiigurratiion commmannds, onne pper linne. Ennd wwithh CNNTL/Z.NAS(cconffig)#exxiNAS#ssh rrunnningg-coonfiig NAS#ssh vverssionn NAS#cconff tEnterr coonfiigurratiion commmannds, onne pper linne. Ennd wwithh CNNTL/Z.NAS(cconffig)#innt llo 00NAS(cconffig-if)#ipp addd 22.2.2.22 2555.2255.

12、2555.0NAS(cconffig-if)#exxiNAS(cconffig)#exxiNAS#eexiConnnecttionn too 1992.1168.1399.2554 cclossed by forreiggn hhosttCliennt# 实验结果：审计（acccouuntiing）用用deffaullt验证证的结果果：审计（acccouuntiing）用用commmannds验验证的结结果：实验心得： 感觉还不错错！1.看了一一遍的录录频，第第一次做做时授权权失败，查查不出是是什么原原因；2.然后把把思路调调整了下下、重做做，终于于做出来来了；3.也明白白了为什什么第一一次授权权为什么么失败！