CU HNH AAA- Vic cu hnh AAA c thc hin theo ba bc nh sau:Bc 1: Bt
t!nh n"n# cho $h%$ cu hnh AAA t&'n &oute&( )&on#
su*t +u, t&nh -,c .nh AAA/ &oute& $h0i cu hnh sao cho
n1 2u3n n1i chu4n c 5i )ACAC678A9:U6 se&5e&(Bc 2: ;,c .nh
n# c -,c thc/ c c$ +u4?n nh th@ n=o/ 5= c,i # s> #i,A s,t cB
sC DE 2iu(Bc 3: Cho $h%$ hoFc .nh n#hGa $hBn# thHc t&'n #iao
ti@$(- C,c $hIn ti@$ theo s> n1i AJt c,ch chi ti@t c,ch thHc bt
chHc n"n# AAA Kbc LM/ c,chthHc -,c .nh $hBn# thHc N -,c thc/ c$
+u4?n/ 5= t!nh cc Kbc OM/ 5= c,ch thHc -,c .nh AAA t&'n AJt
inte&Pace Kbc QM( RN cho #Sn 5= DT D=n# hiNu hBn/ ta c1 thN
#J$hai bc O 5= Q 2Ui 2=A AJt(- ChV W &Xn# AJt Yhi AAA Z c cho
$h%$ t&'n &oute&/ bt Y inte&Pace 5= $hBn# thHc Y@t
n*i n=o c[n# $h0i .nh n#hGa hoFc Yh3n# cho $h%$ t&u4 c$ 5=o( 9o
1/ i?u +uan t&Sn# nht 2= $h0i tUo AJt \c,nh c]a hu^ KbacY
Doo&M ha4 2= c,ch thHc t&u4 c$ c_c bJ K2oca2M t&on#
su*t +u, t&nh t&iNn Yhai ban Iu N b0o 0A &Xn#
&oute& 2u3n c1 thN t&u4 c$c n@u ta +u'n nhEn# # Z cu
hnh t&c 1( L( Bc 1- Cho php chc nng AAA trn router:- RN cho
$h%$ AAA t&'n &oute&/ ta s] D_n# c`u 2nh
sau:8oute&KconPi#Maaaa neb-AoDe2- cJt Yhi AAA c cho $h%$ th
&oute& $h0i chd @n .a chd sou&ce cea AAA
se&5e&( Vi )ACAC6 se&5e&/ th c`u 2nh s>
2=:8oute&KconPi#Matacacs-se&5e& host
host-i$-aDD&ess
fsin#2e-connectiong8oute&KconPi#Matacacs-se&5e& Ye4
se&5e&Ye4)haA s* host-ip-address -,c .nh .a chd cea )ACAC6
se&5e&( )haA s* single-connection cho bi@t &oute&
Du4 t& AJt Y@t n*i Bn t&on# su*t $hi'n 2=A 5ic #iEa
&oute& 5= AAA se&5e&( - cJt $assbo&D chun# c
Dhn# #iEa access &oute& 5= AAA se&5e& N b0o At
th3n# tin(V! D_/ c`u 2nh cho $h%$ thi@t 2$ $assbo&D t&'n
&oute& nh sau:8oute&KconPi#Matacacs-se&5e& Ye4
ciscoiassbo&D c chSn $h0i #i*n# $assbo&D cu hnh nh t&'n
AAA se&5e&( iassbo&D $h`n bit Y! t hoa/ Y! t th c YiNA
t&a t&c ti'n/ sau 1 use&naAe7$assbo&D c_c bJ
t&'n A,4 s> c s] D_n# n@u )ACAC6{ Yh3n# $hh h$ ha4 t&0
5? AJt 2xi Ke&&o&M(2.1.?:- C`u 2nh ((( (uthent)c(t)on
(n.) c s] D_n# Y@t h$ 5i 2nh (n.) (uthent)c(t)on t&on# 5ic cu
hnh 2ine N A3 t0 $hBn# thHc c s] Dhn# Yhi AJt NA6: use& Au*n
t&u4 c$ 5=o &oute&(CV $h,$ c`u 2nh nh sau:(((
(uthent)c(t)on (n.) p,e-(u+t q 2ist-naAer AethoDL fAethoDOg
fAethoDQg fAethoDsg- C,c $hBn# $h,$ c Dhn# t&on# c`u 2nh n=4:u
+oc(+: $hBn# $h,$ n=4 -,c .nh -,c thc bXn# 5ic s] D_n# cF$ u.ern(0e
4444 p(..6or, ---- t&'n &oute&(u en(b+e: $hBn# $h,$ n=4
-,c .nh &Xn# s> s] D_n# c`u 2nh en(b+e p(..6or, N -,c thc
t&'n inte&Pace( Vic -,c thc c thc hin bXn# 5ic so s,nh
$assbo&D n# b. 4'u cIu -,c thc )ACAC6{ t&c ti'n 5= sau
1 s> s] D_n# use&naAe7$assbo&D c_c bJ n@u )ACAC6{ b. 2xi
ha4 Yh3n# th!ch h$(2.2. C"p #u$%n 'Author)@(t)on*:- cJt Yhi
use& Z c -,c thc/ th ta cIn #ii hUn nhEn# +u4?n A= hS c $h%$ s]
D_n#( Ri?u 1 c thc hin th3n# +ua c`u 2nh aaa autho&iation(
NhEn# #ii hUn c1 thN ,$ Ft 5=o hoUt Jn# ha4 D.ch 5_ c 4'u cIu bCi
&oute&( Vi 5ic c$ thoA +u4?n/ AAA thi@t 2$ AJt
subaDAinist&ato& N cho $h%$ t&u4 c$ 5=o ch@ J
conPi#u&ation AoDe/nhn# 5i Yh0 n"n# 2= chd c1 thN s] D_n# AJt
t$ nhv c,c 2nh c $h%$( cFc Dh c1 thN/ 5ic cu hnh &oute&
s> b. hUn ch@(- CV $h,$ Dhn# N c$ +u4?n Yh, Bn #i0n/ n1 -,c .nh
hoUt Jn# ha4 D.ch 5_ Knetbo&Y/ e-ec/ coAAanD 2e5e2/
conPi#-coAAanD/ &e5e&se-accessM c s] D_n# cho use&(
9Un# tnn# +u,t cea c`u 2nh c$ thoA +u4?n 2=:((( (uthor)@(t)on
.erv)ce-t$pe p,e-(u+t q 2ist-naAer AethoDL fAethoDOg fAethoDQg
fAethoDsgC`u 2nh t&'n c1 W n#hGa nh sau:((( (uthor)@(t)on
Do-bhatw checY-hobwcnh ? ,o-6h(tA c1 thN 2=:u net6or;: thaA s* n=4
Dhn# $hBn# $h,$ checY-hobw N c$ +u4?n 5= thi@t 2$ c,c 4'ucIu D.ch
5_ c1 2i'n +uan @n AUn# nh 2= 6:i/ iii(u eBec: thaA s* n=4 Dhn#
$hBn# $h,$ checY-hobw N c$ +u4?n n@u use& c $h%$ tUohoFc chU4
t&on# ch@ J ;C she22( N@u )ACAC6{ hoFc 8A9:U6 c s] D_n#/ th c1
thN cB sC DE 2iu s> t&0 5? AJt th3n# tin 5i c`u 2nh t Jn#
cho n# c YiNA t&a( u )--(uthent)c(te,: 5i thaA s* n=4/ n@u
AJt use& c -,c thc &ki/ th hS c $h%$ thi@t 2$ chHc n"n#(
ChV W &Xn# C `4 Yh3n# YiNA t&a thoA +u4?n A= chd cIn
use& c1 t&on# cB sC DE 2iu 2= Z $hh h$(u none: 5i thaA s*
n=4/ &oute& Yh3n# li hvi th3n# tin thoA +u4?n cho Do-bhatw(
)hoA +u4?n Yh3n# c thi@t 2$ 5= AJt c`u t&u4 5n s> c #Ci @n
cB sC DE 2iu(u +oc(+: 5i thaA s* n=4/ &oute& hoFc access
se&5e& s> YiNA t&a use&naAe7$assbo&D c cu
hnh C ch@ J conPi#u&e AoDe 2u c_c bJ t&on# &oute&(u
r(,)u.: 5i thaA s* n=4/ thoA +u4?n 8A9:U6 s> c thc hin bXn# 5ic
#n c,c thuJc t!nh cho use&naAe t&'n 8A9:U6 se&5e&(
cxi use&naAe chn# 5i thuJc t!nh c 2u t&E b'n t&on#
8A9:U6 Database(u ;rb:-)n.t(nce: 5i thaA s* n=4/ &oute&
s> t&u4 5n @n ~e&be&os se&5e& N 4'u cIu c$
thoA +u4?n( )hoA +u4?n s> c 2u t&on# ~e&be&os
se&5e&(- Nhn chun#/ thoA +u4?n c1 thN c=i Ft theo nhi?u
c,ch( Vn ? 2= tA Yi@A -eA th] t&on# Database ha4 t=i n#u4'n n=o
c1 cF$ AV ha4 thuJc t!nh N cun# c$ cho &oute& c`u t&0
2 Yh3n# th] -,c thc th'A $hBn# $h,$ ti@$ theo t&on#
2istnaAe nEa(2.1.2.1.7. AAA Authent)c(t)on A8A9C`u 2nh (((
(uthent)c(t)on (r(pc s] D_n# Y@t h$ 5i 2nh (r(p (uthent)c(t)on
t&on# 5ic cu hnh 2ine( N1 A3 t0 c,ch thHc A= A8Ai use& an#
th] t&u4 c$ 5=o &oute&(CV $h,$ c`u 2nh nh sau:(((
(uthent)c(t)on (r(p p,e-(u+t q list-namer method1 fmethod2g
fmethod3g fmethod4g C,c $hBn# $h,$ c Dhn# t&on# c`u 2nh
n=4:+)ne: $hBn# $h,$ n=4 -,c .nh s] D_n# $assbo&D N -,c thc 5=o
inte&Pace( C`u 2nh n=4 c s] D_n# t&on# c`u 2nh 2o#in 5=
$assbo&D t&on# ttn# 2ine Kconso2e/ 5t4/(((M+oc(+: $hBn#
$h,$ n=4 -,c .nh -,c thc bXn# 5ic s] D_n# cF$ u.ern(0e yyyy
p(..6or, (((( t&'n &oute&(t(c(c.3: $hBn# $h,$ n=4 -,c
.nh s] D_n# )ACAC6 se&5e& N -,c thc(gue.t: $hBn# $h,$ n=4
cho $h%$ 2o#in 5=o n@u use&naAe 2= #uest( )h4 chSn n=4 chd $hh
h$ 5i A8Ai((uth-gue.t: $hBn# $h,$ n=4 cho $h%$ Yh,ch chd c 2o#in
5=o n@u use& Z 2o#in 5=o ch@ J ;C t&'n &oute& 5=
an# YhCi tUo ti@n t&nh A8Ai(ChV W &Xn# AFc .nh th Yh,ch
5i@n# th"A Yh3n# thN 2o#in th3n# +ua A8Ai Yhi ta YhCi tUo AAA( C`u
2nh ((( (uthent)c(t)on (r(p5i hai tt Yh1a gue.t hoFc (uth-gue.t
s> cIn thi@t N Yh,ch t&u4 c$ Yhi s] D_n# AAA(V!
D_:8oute&KconPi#Maaaa authentication a&a$ A4aaa tacacs{
2oca28oute&KconPi#Ma2ine L LO8oute&KconPi#-2ineMaa&a$
authentication A4aaa | 5! D_ t&'n/ c`u 2nh Iu ti'n -,c
.nh&Xn# Dhn# -,c thc )ACAC6{ t&c ti'n/ sau 1 Ai Dhn#
use&naAe7$assbo&D c_c bJ t&'n &oute& n@u
)ACAC6{ t&0 5? AJt 2xi Ke&&o&M hoFc Yh3n# $hh h$
Kuna5ai2ab2eM( )t 2ine L @n 2ine LO s> s] D_n# -,c thc t&on#
2istnaAe 5ta tUo(2.1.1.1.1.AAA Authent)c(t)on 999C`u 2nh (((
(uthent)c(t)on pppc s] D_n# Y@t h$ 5i 2nh ppp (uthent)c(t)on
t&on# 5ic cu hnh 2ine N A3 t0 $hBn# thHc c s] D_n# Yhi AJt
use& s] D_n# iii Au*n t&u4 c$ 5=o &oute&( CV $h,$
c`u 2nh nh sau:((( (uthent)c(t)on ppp p,e-(u+t q list-namer method1
fmethod2g fmethod3g fmethod4g C,c $hBn# $h,$ c Dhn# t&on# c`u
2nh n=4:+oc(+: $hBn# $h,$ n=4 -,c .nh -,c thc bXn# 5ic s] D_n# cF$
u.ern(0e yyyy p(..6or, (((( t&'n &oute&(none: $hBn#
$h,$ n=4 -,c .nh &Xn# Yh3n# cIn s] D_n# $hBn# $h,$ -,c thc n=o
c0(t(c(c.3: $hBn# $h,$ n=4 -,c .nh s] D_n# )ACAC6 se&5e& N
-,c thc(r(,)u.: $hBn# $h,$ n=4 -,c .nh s] D_n# 8A9:U6
se&5e& N -,c thc(;rb:: $hBn# $h,$ n=4 Dhn# ~e&be&os
chd $hh h$ cho thao t,c Ko$e&ationM iii 5= c,c 2i'n 2Uc 5i AJt
~e&be&os se&5e& Z c thi@t 2$( ;,c thc 2o#in s] D_n#
~e&be&os chd 2=A 5ic 5i #iao thHc iii iAi( )--nee,e,: $hBn#
$h,$ n=4 n#tn# -,c thc n@u AJt use& Z c -,c thc t&c 1
t&'n 2ine tt4(V! D_:8oute&KconPi#Maaaa authentication $$$
A4aaa tacacs{ 2oca28oute&KconPi#Ma2ine L
LO8oute&KconPi#-2ineMa$$$ authentication A4aaa Chn# AJt DUn# cV
$h,$ c s] D_n# th3n# +ua nhi?u c`u 2nh AAA( Vi c`u 2nh ppp c thi@t
2$/ th c`u 2nh t&'n inte&Pace 2= ppp (uthent)c(t)on
option%s& 5i option%s& 2= c,c th4 chSn p(p! ch(p! p(p ch(p!
ch(p p(p! 0.-ch(p( )h'A 5=o 1/ c,c $hBn# $h,$ t&on# AAA c1 thN
s] D_n#( | 5! D_ t&'n th )ACAC6{ s> c YiNA t&a t&c
ti'n/ sau 1 use&naAe7$assbo&D c_c bJ t&'n A,4 s> c
s] D_n# n@u )ACAC6{ Yh3n# $hh h$ ha4 t&0 5? AJt 2xi
Ke&&o&M(2.1.1.1.2.AAA Authent)c(t)on A=>?C`u 2nh (((
(uthent)c(t)on (n.)c s] D_n# Y@t h$ 5i 2nh (n.) (uthent)c(t)on
t&on# 5ic cu hnh 2ine N A3 t0 $hBn# thHc c s] Dhn# Yhi AJt NA6:
use& Au*n t&u4 c$ 5=o &oute&(CV $h,$ c`u 2nh nh
sau:((( (uthent)c(t)on n(.) p,e-(u+t q list-namer method1 fmethod2g
fmethod3g fmethod4g C,c $hBn# $h,$ c Dhn# t&on# c`u 2nh
n=4:+oc(+: $hBn# $h,$ n=4 -,c .nh -,c thc bXn# 5ic s] D_n# cF$
u.ern(0e yyyy p(..6or, (((( t&'n &oute&(en(b+e: $hBn#
$h,$ n=4 -,c .nh &Xn# s> s] D_n# c`u 2nh enable password N
-,c thc t&'n inte&Pace( Vic -,c thc c thc hin bXn# 5ic so
s,nh $assbo&D n# b. 4'u cIu -,c thc )ACAC6{ t&c ti'n 5=
sau 1 s> s] D_n# use&naAe7$assbo&D c_c bJ n@u )ACAC6{ b.
2xi ha4 Yh3n# th!ch h$(2.1.1.2.C"p #u$%n 'Author)@(t)on*cJt Yhi
use& Z c -,c thc/ th ta cIn #ii hUn nhEn# +u4?n A= hS c $h%$ s]
D_n#( Ri?u 1 c thc hin th3n# +ua c`u 2nh ((( (uthor)@(t)on( NhEn#
#ii hUn c1 thN ,$ Ft 5=o hoUt Jn# ha4 D.ch 5_ c 4'u cIu bCi
&oute&( Vi 5ic c$ thoA +u4?n/ AAA thi@t 2$ AJt
subaDAinist&ato& N cho $h%$ t&u4 c$ 5=o ch@ J
conPi#u&ation AoDe/nhn# 5i Yh0 n"n# 2= chd c1 thN s] D_n# AJt
t$ nhv c,c 2nh c $h%$( cFc Dh c1 thN/ 5ic cu hnh &oute&
s> b. hUn ch@(CV $h,$ Dhn# N c$ +u4?n Yh, Bn #i0n/ n1 -,c .nh
hoUt Jn# ha4 D.ch 5_ Knetbo&Y/ e-ec/ coAAanD 2e5e2/
conPi#-coAAanD/ &e5e&se-accessM c s] D_n# cho use&(
9Un# tnn# +u,t cea c`u 2nh c$ thoA +u4?n 2=:((( (uthor)@(t)on
service-type p,e-(u+t q list-namer method1 fmethod2g fmethod3g
fmethod4g C`u 2nh t&'n c1 W n#hGa nh sau:((( (uthor)@(t)on
do-)hat* chec'-ho)* cnh ? do-what? c1 thN 2=:net6or;: thaA s* n=4
Dhn# $hBn# $h,$ chec'-ho)* N c$ +u4?n 5= thi@t 2$ c,c 4'u cIu D.ch
5_ c1 2i'n +uan @n AUn# nh 2= 6:i/ iii(eBec: thaA s* n=4 Dhn# $hBn#
$h,$ chec'-ho)* N c$ +u4?n n@u use& c $h%$ tUo hoFc chU4
t&on# ch@ J ;C she22( N@u )ACAC6{ hoFc 8A9:U6 c s] D_n#/ thc1
thN cB sC DE 2iu s> t&0 5? AJt th3n# tin 5i c`u 2nh t Jn#
cho n# c YiNA t&a( )--(uthent)c(te,: 5i thaA s* n=4/ n@u
AJt use& c -,c thc &ki/ th hS c $h%$ thi@t 2$ chHc n"n#(
ChV W &Xn# C `4 Yh3n# YiNA t&a thoA +u4?n A= chd cIn
use& c1 t&on# cB sC DE 2iu 2= Z $hh h$(none: 5i thaA s*
n=4/ &oute& Yh3n# li hvi th3n# tin thoA +u4?n cho do-)hat*(
)hoA+u4?n Yh3n# c thi@t 2$ 5= AJt c`u t&u4 5n s> c #Ci @n cB
sC DE 2iu(+oc(+: 5i thaA s* n=4/ &oute& hoFc access
se&5e& s> YiNA t&a use&naAe7$assbo&D c cu
hnh C ch@ J conPi#u&e AoDe 2u c_c bJ t&on#
&oute&(r(,)u.: 5i thaA s* n=4/ thoA +u4?n 8A9:U6 s> c
thc hin bXn# 5ic #n c,c thuJc t!nh cho use&naAe t&'n 8A9:U6
se&5e&( cxi use&naAe chn# 5i thuJc t!nh c 2u t&E
b'n t&on# 8A9:U6 Database(;rb:-)n.t(nce: 5i thaA s* n=4/
&oute& s> t&u4 5n @n ~e&be&os se&5e&
N 4'u cIu c$ thoA +u4?n( )hoA +u4?n s> c 2u t&on#
~e&be&os se&5e&(Nhn chun#/ thoA +u4?n c1 thN c=i Ft
theo nhi?u c,ch( Vn ? 2= tA Yi@A -eA th] t&on# Database ha4 t=i
n#u4'n n=o c1 cF$ AV ha4 thuJc t!nh N cun# c$ cho &oute&
c`u t&0 2
