19.07.2013 Views

CCNP TSHOOT 6.0 - Cisco Learning Home

CCNP TSHOOT 6.0 - Cisco Learning Home

CCNP TSHOOT 6.0 - Cisco Learning Home

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

<strong>CCNP</strong>v6 <strong>TSHOOT</strong><br />

DLS1#debug aaa authorization<br />

AAA Authorization debugging is on<br />

DLS1#<br />

Dec 7 16:06:34.836: AAA/AUTHOR (0xD): Pick method list 'default' - FAIL<br />

Dec 7 16:06:34.844: AAA/AUTHOR/EXEC(0000000D): Authorization FAILED<br />

The above example shows the method list defined and being used for AAA authorization (default). Note that the<br />

authorization attempt failed.<br />

SSH-related Commands<br />

R3#show ip ssh<br />

SSH Enabled - version 1.99<br />

Authentication timeout: 120 secs; Authentication retries: 3<br />

Minimum expected Diffie Hellman key size : 1024 bits<br />

R3#show ip ssh<br />

SSH Disabled - version 1.99<br />

%Please create RSA keys (of at least 768 bits size) to enable SSH v2.<br />

Authentication timeout: 120 secs; Authentication retries: 3<br />

Minimum expected Diffie Hellman key size : 1024 bits<br />

The first example above shows the output when the RSA keys have been created and SSH is enabled. The<br />

second example shows the output when there are no RSA keys and SSH is disabled.<br />

R3#show ssh<br />

Connection Version Mode Encryption Hmac State Username<br />

0 2.0 IN aes256-cbc hmac-sha1 Session started raduser<br />

0 2.0 OUT aes256-cbc hmac-sha1 Session started raduser<br />

1 2.0 IN aes256-cbc hmac-sha1 Session started admin<br />

1 2.0 OUT aes256-cbc hmac-sha1 Session started admin<br />

%No SSHv1 server connections running.<br />

The above example shows active SSH connections with the username, version, mode, encryption, HMAC, and<br />

state of the connection.<br />

ACL-related Commands<br />

R3#show access-lists<br />

Standard IP access list 1<br />

10 permit 10.1.80.100 (77 matches)<br />

The above example shows the currently configured ACLs with the type, number (if one is assigned), statements,<br />

and the number of matches for each one.<br />

R3#show ip interface fa0/0<br />

FastEthernet0/0 is up, line protocol is up<br />

Internet address is 10.1.80.1/24<br />

Broadcast address is 255.255.255.255<br />

Address determined by non-volatile memory<br />

MTU is 1500 bytes<br />

Helper address is not set<br />

Directed broadcast forwarding is disabled<br />

Multicast reserved groups joined: 224.0.0.10<br />

Outgoing access list is not set<br />

All contents are Copyright © 1992–2010 <strong>Cisco</strong> Systems, Inc. All rights reserved. This document is <strong>Cisco</strong> Public Information. Page 16 of 22

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!