Cisco PIX 525 Especificaciones descargar pdf (Pagina 272)

100

101

16-4

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 16 Applying AAA for Network Access

Configuring Authentication for Network Access

The following commands authenticate Telnet traffic from the outside interface to a particular server

(209.165.201.5):

hostname/contexta(config)# aaa-server AuthInbound protocol tacacs+

hostname/contexta(config-aaa-server-group)# exit

hostname/contexta(config)# aaa-server AuthInbound (inside) host 10.1.1.1

hostname/contexta(config-aaa-server-host)# key TACPlusUauthKey

hostname/contexta(config-aaa-server-host)# exit

hostname/contexta(config)# access-list TELNET_AUTH extended permit tcp any host

209.165.201.5

eq telnet

hostname/contexta(config)# aaa authentication match TELNET_AUTH outside AuthInbound

Enabling Secure Authentication of Web Clients

The security appliance provides a method of securing HTTP authentication. Without securing HTTP

authentication, usernames and passwords provided to the security appliance would be passed to the

destination web server. By using the aaa authentication secure-http-client command, you enable the

exchange of usernames and passwords between a web client and the security appliance with HTTPS.

HTTPS encrypts the transmission, preventing the username and password from being passed to the

external web server by HTTP.

After enabling this feature, when a user accesses a web page requiring authentication, the security

appliance displays the Authentication Proxy Login Page shown in Figure 16-1.

Figure 16-1 Authentication Proxy Login Page

1 2 ... 267 268 269 270 271 272 273 274 275 276 277 ... 603 604

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 272

Comentarios a estos manuales