NAS(config)#int f1/0
NAS(config-if)#ip add 192.168.139.254 255.255.255.0
NAS(config-if)#no shut
NAS(config)#int f0/0
NAS(config-if)#ip add 192.168.2.254 255.255.255.0
NAS(config)#line con 0
NAS(config-line)#login authenticationlhy
NAS(config-line)#exi
NAS(config)#tacacs-server host 192.168.139.4 key cisco----配置共享key----
Trying to authenticate with Servergroup tacacs+
Sending password
User successfully authenticated--------认证成功---------
NAS#
NAS(config)#aaa authentication enable default group tacacs+
Client#ping 192.168.139.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.139.254, timeout is 2 seconds:
!!!!!
在VMware中配置：
NAS:
NAS#test aaa group tacacs+cisco cisconew-code
NAS(config)#end
NAS#sh running-config
NAS#sh version
NAS#exi
[Connection to 192.168.139.254 closed by foreign host]
Client#
审计（accounting）用commands验证：
防火墙技术实验报告
时间：2012-03-13
实验名称：
简单的AAA配置
班 级
计算机网络技术100#
姓名
#
实验内容
1、拓扑图：
2、实验设备：
1).用一台PC机桥接到VMware内win server2003服务器；
2).用两台Router c3600，一台做NAS、一台做Client；
3、实验步骤：
NAS：
NAS#conf t
NAS(config)#exi
NAS#exi
[Connection to 192.168.139.254 closed by foreign host]
Client#----------授权成功--------------------
审计（accounting）用default验证：
NAS(config-if)#no shut
NAS(config)#username cisco privilege 15 password cisco
NAS(config)#enable secret cisco--------配置enable密码--------
NAS(config)#aaa new-model--------开启AAA功能--------
Client#telnet 192.168.139.254
Trying 192.168.139.254 ... Open
Username: cisco
Password:
NAS#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Client#
授权（authorization）验证结果：
Client#telnet 192.168.139.25. Open
Username: cisco
Password:
NAS#-----------直接进入特权模式--------------
--------将enable加入AAA认证中---------
NAS(config)#aaa authorization exec default group tacacs+
NAS(config)#aaa accounting exec default start-stop group tacacs+-----默认审计方式------
NAS(config)#aaa accounting commands 15 default start-stop group tacacs+-----命令审计方式------
Client:
将enable加入AAA认证里的验证结果：
lient#telnet 192.168.139.254
Trying 192.168.139.254 ... Open
NAS(config)#aaa authen loginciscogroup tacacs+ local
NAS(config)#aaa authen loginlhynone
NAS(config)#line vty 0 15
NAS(config-line)#login authencisco
NAS(config-line)#exi
User Access Verification
Username: cisco
Password:
NAS>en
Password:
NAS#conf t
NAS(config-if)#end
NAS#exi--------------------验证成功--------------------
[Connection to 192.168.139.254 closed by foreign host]
Client:
Client(config)#int f0/0
Client(config-if)#ip add 192.168.2.2 255.255.255.0
Client(config-if)#no shut
Client(config)#no ip routing
Client(config)#ip default-gateway 192.168.2.254