At the moment in the Jinnah's three typology we can log in to write one with the user named David and
password Cisco.
The server however only has a user name of admin.
So once we integrate our one with the US server David will no longer be able to log in.
So let's configure our one to talk to the authentication server at the moment.
Please note that on the console when we use the command log in we have the option log in enter or carriage
return which means that the password on the line is used for theni cation or we can specify that to
a local username and password database is used for any question.
One of the first commands we're going to use with Triple A is triple A new model.
This will enable new access control commands and functions.
And disable old commands.
So we've entered Triple A new model now and we go on to the console and type log in.
Notice the options have changed.
Previously we had log in local logging into but if we type logging into that doesn't work or logon local.
That also doesn't work.
So the authentication commands have changed and now we have the options a log in a theni cation and
we can specify a word or the default option.
I'm not going to enter that now.
By default the authentication used is default and I'll show you where that's configured in a moment.
So all we've done thus far is specify Triple A new model.
We need a local user name and password as backup.
But that was configured previously.
So we've got to use the names and passwords here.
David and Mary.
So what we'll do now is specify Takacs.
You could use radius but in this example I'm going to specify a tech hex host of 10 Daube wondered wondered
one that is this a C S server A C A server has an IP address of 10 1 1 2 1.
So as an example paying tended 1.1 that one the rodder can ping the server.
We need to specify a password that's going to be used for encryption.
So we use the common Tech X server key and then specify a password for the encryption key for the encryption.
I'll use Cisco here and now we need to specify Triple-A options.
We have a thin location authorization and accounting.
I'm going to specify a syndication what are we going to a theni Kate in our example begin with and he
kept a log in attempts to the Rodda So triple a syndication.
You could also use triple A for sessions.
In other words CHEP or pap.
Or when someone uses the enable command to go to the enable mode.
But you will simply do it for luggin.
We can use a word or default and that's where that default option comes in.
Default means that this theni cation method is going to be applied to all lines on the router.
That means the console exhilarate port v.t. Why lines and TDY lines.
We didn't apply authentication on the exit to report on this router but by using Triple-A.
It's a lot easier to apply and authentication on every line on the device and not to miss some of the
lines.
So it's a lot better than doing things locally.
We can then specify what's going to be used for syndication.
In our example we want to specify a group which is going to be Takacs because we're using a tech X protocol
and then as a backup authentication method we can use local.
What that means is that if the router is able to connect to the Tech X server because the network is
down or the server is down a local username and password database will be used as an alternate method
for a thin equating the user.
Now please note offene cation failures to the Tech X server doesn't mean that the local database will
be used.
The local database is only used if the X server is unavailable.
So there was the configuration show run will allow us to see that.
So we specified a new model we specified.
Our authentication default method is going to be using Tech X and then a local database.
These were configured previously but you would need to configure a local username and password as a
backup.
He has our Tech X server information and notice on the lines we no longer see log in local.
The console is using the default which is to use Takacs And if that fails to use a local database.
So when we try and log back into the router with a user name of David and password of Cisco it works
at the moment because the router isn't connected to the Tech X server.
We still have to configure the Tech X server to allow the router to communicate with the Tech X server.
At the moment we have some other devices here but the genius 3 router isn't configured.