如何通过ACS 4.1测试Radius和Tacas方式的CLI Views授权

一.测试拓扑

二.基本配置

R1：

interface FastEthernet0/0

ip address 100.1.1.1 255.255.255.0

no shut

三.R1创建cli-view

A.启用AAA

aaa new-model

--不能用如下的线下保护，不能有none

aaa authentication login noacs line none

line con 0

login authentication noacs

line vty 0 4

login authentication noacs

B.设定enable密码

enable secret cisco

C.进入root view，创建view，并设定view可以执行的命令

R1#enable view

Password:

R1#

*Mar  1 00:28:11.447: %PARSER-6-VIEW_SWITCH: successfully set to view 'root'.

parser view secop-view

secret cisco

commands exec include show access-lists

commands exec include configure terminal

commands configure include ip access-list extended

commands ipenacl include all deny

commands ipenacl include all permit