Now the main difference between the old way of doing it and the new way is that we can create groups
so you use the commode Tech X server and you give your server a name you specified the IP address and
key of the Tech X server.
Previously you topped those two commands.
But now you configure the configuration as follows.
You also create groups which you can use to provide to different services.
So the top triple A group server.
In this case Takacs and create a group which then maps back to the server a previously created.
And now when you specify you will log in you point to this group here rather than pointing simply to
Takacs the Skyview more flexibility than what you had previously this router is running Iowa.
The version 15 dots six of Iowas.
So it's a lot newer version than the other rod is notice 15 dot 6 too.
So all configured this Rodda using the new method which is the method that you need to know for the
CCN exam Confiteor Triple A new model.
Now before I enter that at the moment please note that there is no authentication to log in but what
I'll do now is enable Triple A New Model specify a backup.
Use the name of David with a password of Cisco.
Note once again that
the console has no any cation configured on it and neither do the other lines such as the orc's and
VQ 1 lines techniques and the difference now is we have space server and now we can specify a name.
So AC so whatever name you want.
This gives us different options but as an example we can specify the IP version for the address of the
server and the key that's going to be used.
So we've specified the address of the server and the key for the encryption to the server top exit.
And now we can use the command Triple A group server you know example it's going to be Task X and we've
just given a name of a group various options are available but now we can specify a server and the name
of the server which we created previously.
So this is referring back to the server that we created.
So these commands are subcommanders as follows top exit.
And now we can top triple a syndication log in we're going to use a default list to apply it to all
the lines.
And now we're going to specify group which in our case is going to be a C-s group and then we'll use
local as a backup mechanism.
Now the IP address on gigabit 00 is 10 to 1 1 2 2 0 4.
So back in yes we need to specify route a full tenured one or to or 4 clicks submit and apply Raud is
now being added.
So now on the console of the Rodda notice we are prompted for user name specify Edmon specify positive
Cisco
try that again.
Admen Cisco
tried the local username and password that works.
There's a problem
between the browser and the server.
And we'll just confirm our configuration.
So we've created a group called A C-s group which is the same over here that's failing at the moment
and we're getting a local authentication.
The server that we pointing to is ACX
which we can see over here.
Password is Cisco for the communication to the same server.
Let's confirm that we did that right on the ACA server.
Notice I forgot to put a key in its specified key of Cisco.
Click submit and apply and now we'll try again so the user name is Edman.
Also to Cisco we are straight in.
So that works.
If we try David in other words the local username and password that should fail and it does because
that user is once again not configured in a C-s so on reports failed attempts we can see that David's
authentication failed.
For this router 10 dot 1.1 to 2 or 4.
So let's copy this configuration and I'll configure this Iowa v late to switch with that configuration.
At the moment the switch has no configuration so I'll create an IP address tendered one to add 1 to
2 or 5
on the switch.
Kennet paying the A C S server yes it can.
So now we can paste that AC s configuration into the switch and there you go.
Back on the A C S server we need to add our switch so switch one tended wondered one to two or five
Poso to Cisco submit that.
So there we go.
So now when we exit out of the switch and log back in we are prompted for a username and password and
admin Siska succeeds whereas a user of David and Cisco fails because that user name is not configured
on the server.
So once again admen Cisco succeeds.
So this is the advantage we've got one two three four five devices using a centralized AC server.
If someone else joined the company we could create another user account.
Such as Peter and click at
specified pitas password click submit.
So we now have admin PITA and user one configured on the switch.
Notice there is no user name
called Peter there's only a user called David.
But if we log in with a new user of Piedra they can log in and we can do that on any of the devices.
So as an example on Rodek 3 we can log in without a problem.
We could even telnet to say Rodda to and log in as Peter by configuring ACX.
We don't have to configure multiple databases of usernames and passwords.
We don't have to configure the Viti why orc's and console ports on every individual device.
The indication of all those ports will be handled through triple A and we'll leverage a central database.
In my example I'm using a Cisco ACX server that's integrated through GNAS 3 and is providing the authentication
for all of these devices centrally using a local database.
But ACX could point to an active directory database and use the usernames and passwords stored in Windows
for authentication to network devices as soon as you have many devices in your network.
It makes sense to use a radius or Takacs server such as Cisco ACX for your centralized theni cation
authorization and accounting.
In this example I was demonstrating task X but you could also use radius as the protocol between the
Rotto or switch and a server.