WEBVTT 1 00:00.000 --> 00:04.280 In the previous video, we set up local authentication here on our six for tel 2 00:04.280 --> 00:05.000 net access. 3 00:05.000 --> 00:08.860 We also created a local administrator account here admin one so that when we do 4 00:08.860 --> 00:10.000 connect to the VTY lines, 5 00:10.000 --> 00:13.000 we have a username and password that we can use to log into the router. 6 00:13.000 --> 00:17.000 So in this video, we're going to kick it up a notch by using the command AAA 7 00:17.000 --> 00:19.000 space new dash model. 8 00:19.000 --> 00:22.000 Now a few things are going to change by default when we do that. 9 00:22.000 --> 00:26.320 First of all, the VTY lines, if we didn't even have log in local there, the 10 00:26.320 --> 00:28.000 default behavior, 11 00:28.000 --> 00:32.450 once we do triple A new model, is to require login authentication at the VTY WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 11 00:28.000 --> 00:32.450 once we do triple A new model, is to require login authentication at the VTY 12 00:32.450 --> 00:33.000 lines. 13 00:33.000 --> 00:36.000 So right out of the gate, let's demonstrate that and then we'll continue. 14 00:36.000 --> 00:40.000 So back to our six week go and currently we have log in local here. 15 00:40.000 --> 00:44.740 So I'm going to take that off of the VTY lines by going to line VTY 0 through 16 00:44.740 --> 00:47.000 15 and say no login. 17 00:47.000 --> 00:51.410 And that actually will do it will do do show run pipe section line just to 18 00:51.410 --> 00:52.000 confirm. 19 00:52.000 --> 00:55.000 And on our VTY lines, no login effectively. 20 00:55.000 --> 00:59.780 So no login required. So we did it tell that the six six six six to ourselves 21 00:59.780 --> 01:00.000 and press center. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 22 01:00.000 --> 01:03.000 But a Bing but a boom, no login required. 23 01:03.000 --> 01:06.880 So we type in who we are now connected once again on VTY line zero, but we didn 24 01:06.880 --> 01:09.000 't have to supply a username or password. 25 01:09.000 --> 01:12.920 So let's exit and do a who again just to confirm we're now back at line 26 01:12.920 --> 01:14.000 consoles here. 27 01:14.000 --> 01:18.060 Fantastic. Let's go into configuration mode and let's type in triple A space 28 01:18.060 --> 01:19.000 new dash model. 29 01:19.000 --> 01:22.000 Now that's the only change I just made. 30 01:22.000 --> 01:27.000 However, the default behavior on the VTY lines is going to require a login now. 31 01:27.000 --> 01:31.000 So we do a show run pipe section line and press center. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 31 01:27.000 --> 01:31.000 So we do a show run pipe section line and press center. 32 01:31.000 --> 01:35.630 It knows that even though on the VTY lines, it doesn't say log in local because 33 01:35.630 --> 01:40.650 we have triple A new model enabled effectively is requiring a login now on the 34 01:40.650 --> 01:41.000 VTY lines. 35 01:41.000 --> 01:46.000 So to test that we can do a tell that to six six six six press center. 36 01:46.000 --> 01:49.740 Now it's asking for username we have one admin one and we'll supply the 37 01:49.740 --> 01:54.000 password capital C. I. S. E. O. exclamation mark two three press center and we 38 01:54.000 --> 01:54.000 're in. 39 01:54.000 --> 01:58.000 Now notice that we are logged in but still put us in user mode. 40 01:58.000 --> 02:01.680 So if we do a show privilege and press center where our privilege level once we WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 40 01:58.000 --> 02:01.680 So if we do a show privilege and press center where our privilege level once we 41 02:01.680 --> 02:05.560 type in enable press center by default that's going to be enabled 15 will 42 02:05.560 --> 02:07.000 supply the enabled password. 43 02:07.000 --> 02:12.090 Which is capital C. I. S. E. O. exclamation mark two three and now we're in so 44 02:12.090 --> 02:14.000 triple A new model is one step in the right direction. 45 02:14.000 --> 02:19.100 Requiring logins at the VTY lines. Now it doesn't affect the console line. So 46 02:19.100 --> 02:20.000 if we didn't exit. 47 02:20.000 --> 02:24.000 So we're back to the console will do a who and then we take an exit again. 48 02:24.000 --> 02:27.170 Then we'll type an exit again. I'll press center to go back and there's still 49 02:27.170 --> 02:29.000 no login required at the console. 50 02:29.000 --> 02:33.000 So we do a show run type section line and press center for the console. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 50 02:29.000 --> 02:33.000 So we do a show run type section line and press center for the console. 51 02:33.000 --> 02:37.500 It doesn't say log in local but at the same time triple A new model didn't 52 02:37.500 --> 02:42.490 automatically enforce it online console zero although it did enforce a local 53 02:42.490 --> 02:43.000 login on the VTY line. 54 02:43.000 --> 02:48.000 Again that's because we have this in place show run pipe include triple A. 55 02:48.000 --> 02:52.220 We have triple A new dash model implemented and that's what's causing the login 56 02:52.220 --> 02:54.000 requirement on the VTY lines. 57 02:54.000 --> 02:57.600 Now one other cool thing I'd like to share with you about triple A new model is 58 02:57.600 --> 02:59.000 to who verify who we are. 59 02:59.000 --> 03:00.000 Great work. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 60 03:00.000 --> 03:01.000 Sitting at the console still. 61 03:01.000 --> 03:05.000 Let's do a debug of triple A authentication just like that. 62 03:05.000 --> 03:08.920 So now if we did a tell that to our six six six six loop I could dress and 63 03:08.920 --> 03:10.000 press center. 64 03:10.000 --> 03:14.700 Here we have our debug message saying it picked a method list and it picked it 65 03:14.700 --> 03:19.000 one called permanent local and that's a default with triple A new model. 66 03:19.000 --> 03:23.240 So local is referring to the local database the local configuration on this 67 03:23.240 --> 03:27.180 router and that's why we can log in like a user like admin that we created 68 03:27.180 --> 03:28.000 earlier. 69 03:28.000 --> 03:32.000 We can supply the password for that user which is capital C I SEO excellent WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 69 03:28.000 --> 03:32.000 We can supply the password for that user which is capital C I SEO excellent 70 03:32.000 --> 03:35.000 smart 23 press center and we are now logged in. 71 03:35.000 --> 03:39.340 However it still just logged this in in user mode and we'll correct that as 72 03:39.340 --> 03:43.610 well as we get into working with a tack X server and adding some authorization 73 03:43.610 --> 03:47.000 commands as well as login authentication commands to this router. 74 03:47.000 --> 03:50.000 So for now let me type in exit that brings us back to the console. 75 03:50.000 --> 03:53.000 I'll turn off the debugging within on debug all. 76 03:53.000 --> 03:56.000 So now that we have triple A new model implemented on this router. 77 03:56.000 --> 04:00.300 We now have the opportunity to identify which tack X servers or radius servers WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 77 03:56.000 --> 04:00.300 We now have the opportunity to identify which tack X servers or radius servers 78 04:00.300 --> 04:04.300 or LDAP servers etc that this router can use if called upon for additional 79 04:04.300 --> 04:08.730 features like authentication and authorization and accounting using that 80 04:08.730 --> 04:10.000 centralized server. 81 04:10.000 --> 04:13.590 So in the next video I'll walk you through the configuration on the router to 82 04:13.590 --> 04:17.190 point to and use a centralized triple A server and in the example we're going 83 04:17.190 --> 04:19.000 to use we're going to use tack X. 84 04:19.000 --> 04:22.000 So I'll see you there in that next video in just a moment.