Appendix A Ssg Configuration Example - Cisco OL-4387-02 Configuration Manual

Example A-1
!
version 12.2
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
no service password-encryption
!
hostname c10k-ssg
!
boot system disk0:c10k2-p11-mz.bilgepump
logging buffered 4096 debugging
no logging rate-limit
no logging console
enable password mrrbu
!
username cisco password 0 cisco
clock timezone PST -8
clock summer-time PST recurring
facility-alarm intake-temperature major 49
no facility-alarm intake-temperature minor
facility-alarm core-temperature major 53
facility-alarm core-temperature minor 45
!
!
card 1/0 1gigethernet-1
card 8/0 4oc3atm-1
aaa new-model
!
!
aaa group server radius SSG-RADIUS
server 192.168.2.62 auth-port 1812 acct-port 1813
!
aaa group server radius SSG-RADIUS-RISM
server-private 192.168.2.62 auth-port 1812 acct-port 1813 key cisco
!
aaa authentication banner CCC !!! Cisco C10K PRE2 SSG !!!
aaa authentication fail-message CC !!! Unauthorized Access Is Not Permitted !!!
aaa authentication password-prompt Password:
aaa authentication username-prompt Username:
aaa authentication login default local group SSG-RADIUS
aaa authentication login console local
aaa authentication ppp default group SSG-RADIUS
aaa authorization exec vty none
aaa authorization network default group SSG-RADIUS
aaa accounting network default start-stop group SSG-RADIUS
aaa nas port extended
aaa session-id common
ip subnet-zero
ip host-routing
ip ftp username cisco
ip ftp password cisco
no ip domain lookup
ip domain name cisco.com
ip host rism 192.168.2.62
ip host sesm 192.168.2.50
ip name-server 172.16.168.183
ip name-server 172.31.226.120
!
mpls ldp log-neighbor-changes
!
!
ssg enable
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
A-2
Cisco 10000 Router SSG Configuration
Appendix A SSG Configuration Example
OL-4387-02