Re: IOS HTTP Server Authentication

Both solutions are acceptable, but watch out if AAA method is hinted in the
lab.

Note that by making default authentication as local under AAA, you are
telling that even for protocols other than HTTP should be use "local
database" as their default method. So, watchout what the lab task is
hinting.

-Naveen.

On Fri, Apr 10, 2009 at 11:34 AM, omar parihuana
<omar.parihuana_at_gmail.com>wrote:

> Hi Guys,
>
> I've complete one remote lab and I failed the IOS Management section, the
> question was:
>
> o Use TCP port 8080
> o Authenticate users using local username CISCO and the password
> CISCO
> o This password should be stored in the router s configuration as an
> MD5 hash.
>
>
> The solution provided was:
>
> !
> username CISCO secret CISCO
> !
> ip http server
> ip http port 8080
> ip http authentication local
> !
>
> I've tested the solution provided but it doesn't work, it will be necessary
> to change the user privilege:
>
> username CISCO privilege 15 secret CISCO
>
> Then my configuration was:
>
> !
> aaa new-model
> aaa authentication login default local
> !
> ip http server
> ip http port 8080
> ip http authentication aaa
> !
> username CISCO privilege 15 secret CISCO
> !
>
> In acordance to:
>
> http://www.cisco.com/en/US/docs/ios/fundamentals/configuration/guide/web_base
> d_cfg_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1005419<http://www.cisco.com/en/US/docs/ios/fundamentals/configuration/guide/web_base%0Ad_cfg_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1005419>
> and
>
> http://www.cisco.com/en/US/tech/tk59/technologies_configuration_example09186a
> 0080178a51.shtml<http://www.cisco.com/en/US/tech/tk59/technologies_configuration_example09186a%0A0080178a51.shtml>
>
> Which makes sense since that in Cisco DOC is recommended use AAA.
>
> now, in the exam, which configuration would I use?
>
> Rgds.
>
> --
> Omar E.P.T
> -----------------
> Certified Networking Professionals make better Connections!
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Apr 10 2009 - 12:32:11 ART