Anindra-Ramdhan Blog's

Selamat malam, Hari ini saya akan berbagi cara config autentikasi perangkat jaringan menggunakan tacac. adapun config yang akan saya share disini yaitu config perangkat CIENA, CISCO dan Juniper. Berikut konfigurasinya: CIENA tacacs add server xx.xx.xx.xx tacacs set keyminlen 6 tacacs set key x.x.x.x tacacs authorization enable tacacs accounting enable tacacs accounting set command on tacacs accounting set session on tacacs syslog enable user auth set priority 1 method tacacs user auth set priority 2 method local

Config: rpl owner ========= ethernet ring-protection 21 east gigaethernet 0/1 west gigaethernet 1/1 node-type rpl-owner rpl west protocol-vlan 21 block-vlanlist 99,1504 ethernet ring-protection 21 name VR1 rpl neighbor ============ ethernet ring-protection 58 east line 2 west line 1 node-type rpl-neighbour rpl west protocol-vlan 4058 block-vlanlist 2070,2118,2931-2932,4090 ethernet ring-protection 58 name VRR1 ethernet ring-protection 62 east line 2 west line 1 node-type rpl-neighbour rpl west protocol-vlan 4062 block-vlanlist 2945,2998 ethernet ring-protection 62 name VRR2

 Topologi:     Config: rstp disable rstp disable port 1 rstp disable port 2 rstp disable port 3 ring-protection logical-ring create logical-ring-name LR1 ring-id 77 west-port 1 east-port 3 ring-protection virtual-ring create virtual-ring-name VR1 logical-ring LR1 raps-vid 4077 ring-protection virtual-ring set ring VR1 west-port-rpl owner ring-protection virtual-ring add ring VR1 vid 713 ring-protection virtual-ring add ring VR1 vid 715 ring-protection virtual-ring add ring VR1 vid 719-720 + cfm config (if needed)

 Topologi:   Config #show running-config  System current configuration: !command in view_mode ! !command in config_mode first-step create vlan 21,99,555,1504 active ! !command in aclmap_mode ! !command in enable_mode hostname SW1 ! !command in region_mode ! !command in ip igmp profile mode ! !command in evc mode ! !command in aggregation_mode ! !command in qos mapping mode ! !command in wred mode !          !command in l2cpprofile_mode ! !command in ethernetsam flow_mode ! !command in ethernetsam service_mode ! !command in sla thresholdprofile_mode ! !command in port_mode ! interface gigaethernet 0/1 switchport trunk allowed vlan 99,1504 description "UPLINK1" ! interface gigaethernet 1/1 switchport trunk allowed vlan 99,1504 switchport mode trunk description media-type copper "UPLINK2" ! interface gigaethernet 1/2 switchport access vlan 1504 description media-type copper "ACCESS TO CUST" ! !command in vlan configuration mode ! vlan ...

  OID : .1.3.6.1.4.1.6141.2.60.35.1.2.1.1.13.12 sisi A-END cfm service create vlan 565 name CFMNAME1 cfm service set service CFMNAME1 ccm-interval 10ms cfm service enable service CFMNAME1 cfm mep create service CFMNAME1 port 23 type down mepid 34 sisi z-END cfm service create vlan 565 name CFMNAME1 cfm service set service CFMNAME1 ccm-interval 10ms cfm service enable service CFMNAME1 cfm mep create service CFMNAME1 port 2 type down mepid 35