Posted by LTLnetworker on May 14, 2010
An IPv6 host’s default router selection is affected both by manual static routes and received router advertisements.
I am very happy with my HE IPv6 tunnel. Szívesen lennék natív IPv6 felhasználó is, de az UPC nem ad információt, hogy milyen IPv6 tervei vannak. )-: I bookmarked Google’s IPv6 site but once it turned inaccessible. What could have happened?
Read the rest of this entry »
Posted in Cisco, IPv6, router IOS | Tagged: default router, host, ipv6, ra | 3 Comments »
Posted by LTLnetworker on May 10, 2010
AAA Authorization and Authentication Cache was integrated in IOS 15.0(1)M. This feature enables the router to store AAA credentials in its cache after it received the RADIUS or TACACS+ reply to an AAA request. The cache can be used either for performance boost (avoiding sending requests to the AAA server) or for a fallback method in case the servers are unreachable. The mode depends on the order you place your authentication methods in the aaa commands (see below).
In this example we are caching TACACS admin users’ credentials (telnet, vty) and RADIUS VPN users’ credentials (IKE xauth). The VPN group is also defined on the RADIUS server.
Read the rest of this entry »
Posted in ACS, Cisco, IPsec, remote access, router IOS | Tagged: aaa, aaa cache, acs, easy vpn, radius | 2 Comments »
Posted by LTLnetworker on May 7, 2010
Cisco router IOS Easy VPN Server
Group-Lock feature can also be used with local users, we can even create something like ‘local user groups’. Possible formats are:
name/group, name\group, name@group, or name%group
Read the rest of this entry »
Posted in AAA, Cisco, IPsec, remote access, router IOS | Tagged: easy vpn, ezvpn, group-lock | Leave a Comment »