RE: IOS HTTP Server Authentication

From: Tim <ccie2be_at_nyc.rr.com>
Date: Fri, 10 Apr 2009 15:09:53 -0400

One other possibility:

Instead of

ip http authen local

try

ip http authen aaa

Let me know if that works.
Tim

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of omar
parihuana
Sent: Friday, April 10, 2009 2:35 PM
To: Cisco certification
Subject: IOS HTTP Server Authentication

Hi Guys,

I've complete one remote lab and I failed the IOS Management section, the
question was:

o Use TCP port 8080
o Authenticate users using local username CISCO and the password
CISCO
o This password should be stored in the routers configuration as an
MD5 hash.

The solution provided was:

!
username CISCO secret CISCO
!
ip http server
ip http port 8080
ip http authentication local
!

I've tested the solution provided but it doesn't work, it will be necessary
to change the user privilege:

username CISCO privilege 15 secret CISCO

Then my configuration was:

!
aaa new-model
aaa authentication login default local
!
ip http server
ip http port 8080
ip http authentication aaa
!
username CISCO privilege 15 secret CISCO
!

In acordance to:
http://www.cisco.com/en/US/docs/ios/fundamentals/configuration/guide/web_bas
e
d_cfg_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1005419
and
http://www.cisco.com/en/US/tech/tk59/technologies_configuration_example09186
a
0080178a51.shtml

Which makes sense since that in Cisco DOC is recommended use AAA.

now, in the exam, which configuration would I use?

Rgds.

--
Omar E.P.T
-----------------
Certified Networking Professionals make better Connections!
Blogs and organic groups at http://www.ccie.net
Received on Fri Apr 10 2009 - 15:09:53 ART

This archive was generated by hypermail 2.2.0 : Mon May 04 2009 - 07:39:11 ART