1. line vty 0 15 2. login authentication 3. username admin pri 15 admin 4. aaa authentication login default local 5. aaa authorization exec default local 6. aaa new-model
Problems of AAA if without using / assigning command's point 5: any user that successfully login into a router will be placed into user mode (>) not into priviliged exec mode(#).
Friday, 25 September 2015
Every user on the same privilege level can access/execute same set of command.
By default every command in cisco is assigned level 1 dan 15.
Level 0 ada tapi jarang digunakan. Level 0 includes following five commands:
disable
enable
exit
help
logout
Contoh misi:
Kamu mau membatasi perintah yang tersedia untuk user yang terhubung ke suatu port hanya ke Telnet. Kamu bisa melakukan dengan ini:
1. Mengkonfigurasi port itu ke privilege level 0
2. Menurunkan level privilige perintah Telnet ke level 0