Appendix A SSG Configuration Example
Example A-1 Cisco 10000 Router SSG Configuration
!
version 12.2 no service pad
service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone no service password-encryption
!
hostname c10k-ssg
!
boot system disk0:c10k2-p11-mz.bilgepump logging buffered 4096 debugging
no logging rate-limit no logging console enable password mrrbu
!
username cisco password 0 cisco clock timezone PST -8
clock summer-time PST recurring facility-alarm intake-temperature major 49 no facility-alarm intake-temperature minor facility-alarm core-temperature major 53 facility-alarm core-temperature minor 45
!
!
card 1/0 1gigethernet-1 card 8/0 4oc3atm-1
aaanew-model
!
!
aaa group server radius SSG-RADIUS
server 192.168.2.62 auth-port 1812 acct-port 1813
!
aaa group server radius SSG-RADIUS-RISM
server-private 192.168.2.62 auth-port 1812 acct-port 1813 key cisco
!
aaa authentication banner CCC !!! Cisco C10K PRE2 SSG !!!
aaa authentication fail-message CC !!! Unauthorized Access Is Not Permitted !!!
aaa authentication password-prompt Password: aaa authentication username-prompt Username:
aaa authentication login default local group SSG-RADIUS aaa authentication login console local
aaa authentication ppp default group SSG-RADIUS aaa authorization exec vty none
aaa authorization network default group SSG-RADIUS
aaa accounting network default start-stop group SSG-RADIUS aaa nas port extended
aaa session-id common ip subnet-zero
ip host-routing
ip ftp username cisco ip ftp password cisco no ip domain lookup
ip domain name cisco.com ip host rism 192.168.2.62 ip host sesm 192.168.2.50
ip name-server 172.16.168.183 ip name-server 172.31.226.120
!
mpls ldp log-neighbor-changes
!
!
ssg enable
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
