Re: IOS HTTP Server Authentication

Just a note: Concentrate on doing what the task is asking in most simple and
straightforward manner. If task does not specificaly ask to use AAA, then
don't use it. CCIE is not an exam about best practices.

On Fri, Apr 10, 2009 at 8:34 PM, omar parihuana <omar.parihuana_at_gmail.com>wrote:

> Hi Guys,
>
> I've complete one remote lab and I failed the IOS Management section, the
> question was:
>
> o Use TCP port 8080
> o Authenticate users using local username CISCO and the password
> CISCO
> o This password should be stored in the router s configuration as an
> MD5 hash.
>
>
> The solution provided was:
>
> !
> username CISCO secret CISCO
> !
> ip http server
> ip http port 8080
> ip http authentication local
> !
>
> I've tested the solution provided but it doesn't work, it will be necessary
> to change the user privilege:
>
> username CISCO privilege 15 secret CISCO
>
> Then my configuration was:
>
> !
> aaa new-model
> aaa authentication login default local
> !
> ip http server
> ip http port 8080
> ip http authentication aaa
> !
> username CISCO privilege 15 secret CISCO
> !
>
> In acordance to:
>
> http://www.cisco.com/en/US/docs/ios/fundamentals/configuration/guide/web_base
> d_cfg_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1005419<http://www.cisco.com/en/US/docs/ios/fundamentals/configuration/guide/web_base%0Ad_cfg_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1005419>
> and
>
> http://www.cisco.com/en/US/tech/tk59/technologies_configuration_example09186a
> 0080178a51.shtml<http://www.cisco.com/en/US/tech/tk59/technologies_configuration_example09186a%0A0080178a51.shtml>
>
> Which makes sense since that in Cisco DOC is recommended use AAA.
>
> now, in the exam, which configuration would I use?
>
> Rgds.
>
> --
> Omar E.P.T
> -----------------
> Certified Networking Professionals make better Connections!
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Pavel Bykov
----------------
Don't forget to help stopping the braindumps, use of which reduces value of
your certifications. Sign the petition at http://www.stopbraindumps.com/
Blogs and organic groups at http://www.ccie.net