Configure; Network Diagram - Cisco 2800 Series Manual

Secured Branch Router Configuration Example

Configure

In this section, you are presented with the information to configure the features described in this
document.
Tip To find additional information on the commands used in this document, use the
You must have an account on Cisco.com. If you do not have an account or have forgotten your username
or password, click Cancel at the login dialog box and follow the instructions that appear.

Network Diagram

This document uses the network setup shown in the diagram below.
Not shown in the diagram is an HTTP server with IP address 192.168.102.119/24. The HTTP server may
be located anywhere in the network. In this case, it is on the Fast Ethernet 0/1 side of the secured branch
router.
Configurations
This document uses the configuration shown below.
router# show running-config
Building configuration...
.
.
.
!---Enable the authentication, authorization, and accounting (AAA) access control model.
aaa new-model
!
!---Identify the Cisco Secure Authentication Control Server (ACS) as a member of a
!---AAA server group. In this example, the AAA server group is called "SJ."
aaa group server tacacs+ SJ
server 192.168.101.119
!
!---Enable AAA authentication at login and specify the authentication methods to try.
aaa authentication login default local group SJ none
Branch office
PC
192.168.1.118/24
Websense URL
Filtering Server (UFS)
192.168.1.116/24
FE 0/0 FE 0/1
192.168.1.2/24 192.168.101.2/24
Secured branch
router
Configure
Command Lookup Tool.
Cisco Secure
Authentication
Control Server (ACS)
192.168.101.119/24
OL-6329-01
3