Habilitacion seguridad basica del router

Router(config)#enable secret cisco ( acceso al modo exec )

Router(config)#line vty 0 4
Router(config-line)#password passvty
Router(config-line)#login local

Router(config)#line console 0
Router(config-line)#password passconsol
Router(config-line)#login local

Router(config)#line aux 0
Router(config-line)#password passaux
Router(config-line)#login local

Autenticacin Local en el router

Router(config)#enable secret CISCO
Router(config)#aaa new-model
Router(config)#username CIISA secret CISCO
Router(config)#aaa authentication login default local

Autenticacin TACACS+ en el Servidor

Router(config)#aaa new-model
Router(config)#tacacs-server host 192.168.2.254 single-connection
Router(config)#tacacs-server key CISCO1
Router(config)#aaa authentication login default group tacacs+

Autenticacin Radius en el Servidor

Router(config)#aaa new-model
Router(config)#radius-server host 192.168.3.254
Router(config)#radius-server key CISCO2
Router(config)#aaa authentication login default group radius group radius local

Restriccin de Administracin por linea VTY mediante ACL

Router(config)#access-list 10 permit host 192.168.1.2
Router(config)#line vty 0 4
Router(config-line)#access-class 10 in

------------------------------------------------------------------------enable secret CISCO

aaa new-model
username CIISA secret CISCO
aaa authentication login default local

access-list 10 permit host 192.168.1.2

line vty 0 4
access-class 10 in

access-list 10 permit host 192.168.2.2

line vty 0 4
access-class 10 in

Router(config)#enable secret CISCO

Router(config)#access-list 10 permit host 192.168.3.2
Router(config)#line vty 0 4
Router(config-line)#access-class 10 in

enable secret CISCO

access-list 10 permit host 192.168.3.2
line vty 0 4
access-class 10 in