Auth-Proxy configuration

Auth-Proxy configuration

config to setup Auth Proxy on Cisco Router .


aaa new-model
aaa authentication login default group tacacs+
aaa authentication login free none
aaa authentication login AUTH-PROXY group tacacs+
aaa authorization auth-proxy default group tacacs+

ip access-list extencec AUTH-PROXY-ACL
permit tcp any host 10.10.10.1 eq www log
ip auth-proxy name AUTH-PROXY http inactivity-time 5 list AUTH-PROXY-ACL

int ethernet 0/1
ip auth-proxy AUTH-PROXY




now http server need to be running so we need to enable the https server service on our device

ip http server
ip http authentication aaa login-authentication AUTH-PROXY
tacacs-server host 1.1.1.1
tacacs-server key cisco123


Setup authentication free none mentioned in initial lines of config to avoid any lock down on our box.

line con 0
login authentication free



Now Setup ACS server

under interface configuration enter new service
auth-proxy.

group setup

make sure auth-proxy is checked

check custom attribute
enetre acl to apply after user is authenticated
entre the privil levle for implmeentatiopn the auth proxy acl Priv level 15

thats it it should work .

Cisco Routers Tips

Restart your router Immediately

RouterA# reload

Reload in 1o(ten) minutes

This command is helpful when we are accessing the router from remote location and suspect if there is any thing wrong in configuration the router will be restarted with in specified time interval to avoid any lockdown

RouterA# reload in 10

inorder to cancell the reload process (in case configuration is successfull)

RouterA# reload cancel

Command line Editing

Ctrl + A Curser at the begning of line

Ctrl + E Curser at the end of line

Ctrl + P Recall previous command in the buffer

Ctrl + N Recall next command in the buffer

Technical Support

Router A# show tech-support:

This command will be used to collect a great information , that provides lot of information by multiple show commands

Evidence Collection

Inorder to collect the evidence from your routers about the legetemate and illegitemate connections some of the following commands may be helpful

• show reload
• show snmp user
• show snmp group
• show ip arp
• show ip route
• show users
• show logging
• show tcp brief all
• show ip sockets
• show ip nat translations verbose
• show ip cache flow

ALIAS Command

During configuration and day to day operations you are required to type same commands again and again , in this situation Alias command may help you out , comand such as we use very commanly are

• Show ip interface brief
• show ip route e.t.c

to over come this i usually use the alias commands already configured on the routers the syntax of the command is as under

router A (config)# alias

router A (config)# alias exec s show ip interface brief

to check your alias once you forget you can use

# show alias