Groups of AAA Servers

By default, Cisco IOS automatically groups RADIUS and TACACS+ servers configured with the radius-server host and tacacs-server host commands into groups, aptly named radius and tacacs+. The aaa authentication command includes the keywords group radius or group tacacs+ to refer to these default groups. By default, all defined RADIUS servers end up in the radius group, and all defined TACACS+ servers end up in the tacacs+ group. In some cases, particularly with larger-scale dia..

VPN Components

Now that you have a basic understanding of what a VPN is, let's discuss the components that make up a traditional VPN. Not every VPN implementation will include any or all of these components. Plus, based on the requirements listed in your security policy, you might not need all of these components. Therefore, you need to examine your security policy to determine which VPN implementation (or implementations) has the necessary components to meet your security policy's requirem..

Configuring Supervisor Synchronization

By default, the active supervisor synchronizes its startup configuration and configuration register values with the standby supervisor. You also can specify other information that should be synchronized. First, use the following commands to enter the main-cpu configuration mode: Router(config)# redundancy Router(config-red)# main-cpu Then use the following command to specify the information that will be synchronized: Router(config-r-mc)# auto-sync {startup-config | config-reg..

Data Structures of EIGRP

Now that you have reviewed, from a generic perspective, how an IP routing protocol’s data structure interacts with a router’s IP routing table, consider the specific data structures used by EIGRP, as described in Table 6-4.

Local Area Mobility

In this example, the roaming device will have a statically configured address in the 192.168.10.0/24 range. We have to configure the home router to use Proxy ARP for mobile nodes, allowing other locally connected devices in the same range to communicate transparently with the roaming device: RouterHome#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. RouterHome(config)#interface FastEthernet0/0 RouterHome(config-if)#ip address 192.168...