Page 419

Scenario 12-1 393

Scenarios

The following scenario and questions are designed to draw together the content of the chapter
and exercise your understanding of the concepts. There is not necessarily a right answer. The
thought process and practice in manipulating each of the concepts is the goal of this section.

Scenario 12-1

You are the administrator of a RAS and you want to ensure that all users that are using the router
to gain access to the network are authenticated on an AAA device using RADIUS. In addition,
you want anyone who has console or AUX access that might be configuring the router to be
authenticated on the AAA device unless communication to the AAA device fails. In addition,
you want to ensure a backdoor for administrators.

All level 15 commands should be tracked when used. Administrators should gain access
through the console, through AUX, and occasionally through Telnet. Users should only attach
to the router using PPP. Given this setup, answer the questions that follow.

What would be the router configuration given an AAA address of 123.123.123.123 using
a password of AAAsecret?

You now have to allow access to a group of users that will be accessing a Novell service
using the NASI client software. What additional commands need to be added to your
original configuration?

You now have to allow the database to track the connection time for all PPP users. What
additional commands need to be added to your configuration?