SECUR AAA and Cisco 2500 series router?

[CCNA2]

Hi,

I'm studying for the SECUR exam, and would like to know if I can use the 2500 series router for practising (AAA), since it is much cheaper than the 2600 series.

Thanks

Thomas.

 

[Jsteve]

yes, but I believe you need at least 12.2 IOS.

 

[CCNA2]

Hi, thanks for your reply. Does this mean that the Cisco 2500 Cannot be flashed to V12.2 IOS?

Thomas

 

[wybnormal]

No, it means that you need to go to the Cisco site and find out what was the earliest version that supported AAA. The 2500s can do it, I'm running it on a couple of 2511s and using a free Linux TACACS+ server for the authentication.

Here is the config I'm using:

!
version 12.2
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
no service dhcp
!
hostname packetattack-ts
!
logging buffered 16384 debugging
aaa new-model
aaa authentication login default group tacacs+ enable
aaa authentication login old_way none
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ if-authenticated
aaa accounting exec default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
::snip::

This is the version that I'm running:
packetattack-ts uptime is 19 weeks, 12 hours, 14 minutes
System returned to ROM by power-on
System restarted at 19:08:04 pst Thu Jul 31 2003
System image file is "flash:c2500-io-l.122-17a.bin"

MikeS


Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu

 

[CCNA2]

Great, so I can just buy a used Cisco 2500 Router and upgrade it to the newest IOS version?

Does it matter which 2500 router, since there are many?

I don't quite understand why I need to find the earliest version that supports AAA.

Thanks

 

[webnetwiz]

You'd want to max out the amount of flash and RAM in that router in order to run some of the later version of IOS. the max config in a 2500 serries is 16Mb flash and 16Mb DRAM

 

[CCNA2]

Will this one do?

http://www.usedrouter.com/cisco/2501-router.htm

 

[wybnormal]

It only has 8meg of Flash.. you need 16. But then flash is pretty cheap on ebay these days.

Here is an example of a cheap router with everything you need.

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=3063689550&category=28033

Nope.. not mine nor do I know this person.. just the first sample I found.

MikeS


Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu

 

[CCNA2]

That one looks good and cheap . I noticed that it has an ISDN interface. I came to think of how I can use it for testing AAA. I suppose the remote user needs to log in via the ISDN or serial ports. How can I test this, when I have no ISDN equipment. Can I somehow connect a PC to one of the serial WAN interfaces? Or do I need to buy a router with an asynch. line instead and dial in via my PC's modem?

What are Boot ROM upgrades? Is that needed?

I looked on the Cisco website and couldn't find a download link for the newest IOS version, is it not publicly available?

Sorry for having so many questions. What can I say, I need answers

Thanks

Thomas

 

[wybnormal]

To get the new code, you need an account with Cisco. This normally revolves around having equipment on some type of contract.

Boot ROM upgrades are normally free pluys shipping. They offer better and enhanced ways of booting and running the router without the IOS for diags and upgrades.

To play with ISDN, you will need a couple of ISDN lines (big bucks) or an ISDN simulator ( not so big bucks but big enough)

Honestly you can fake ISDN with the AUX port going back to back on a pair of routers.

MikeS




Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu

 

[CCNA2]

Thanks for the info MikeS. What is the cheapest way of running a NAS test lab configuration, so that I can test with one "remote" user logging in via an AAA server?

I need a 2500 series access router loaded with RAM and?