Cisco Ccna (640-553) Security Training: Using The Aaa Session-id Command

y’s article, I’m going to quicklycommon on a router it wouldn’t have any
inform you about the Cisco IOS globaleffect.unique — And, this (optional)
configuration mode command named “aaakeyword is used to make sure that only the
session-id”.corresponding service access-requests and
Network administrators use the “aaaaccounting-requests will maintain a common
session-id” command to indicate whether thesession ID.
same session ID will be used for each AAANote: Accounting-requests for each service will
accounting service type within a call or whether ahave a different session ID.
different session ID will be assigned to eachBelow is an example of the command being used:
accounting service type.Router>enable
In other words, CCNA’s (like you) use theRouter#configure terminal
command to tell a router to store or not to storeRouter(config)#aaa model
its first session ID request of a call in a commonRouter(config)#aaa authentication ppp default
database; if the first session ID is stored, then allgroup radius
proceeding session ID requests will retrieve theRouter(config)#radius-server host 101.100.1.34
value of the first session ID. (This is theRouter(config)#radius-server attribute 44
router’s default behavior).include-in-access-req
And, if the first session ID is not stored, then theRouter(config)#aaa session-id unique
session ID in the access-request will be the sameRouter(config)#exit
as the session ID in the accounting request forIn the example above, the router is being
the same service; all other services (Auth-Proxy,configured to use unique session IDs.
Exec, Network, Command, System, Connection,Now in order to return a router back to its
and Resource) will provide unique session IDs fordefault behavior, all you have to do is type the
the same call.word “no” in front of the command like you
Below is the command’s syntax:aaasee below:
session-id [common | unique]Router(config)#no aaa session-id unique
As you can see, you can use either theBy the way, if you decide to use the command,
“command” keyword or the “unique”make sure your router(s) is running Cisco IOS
keyword with the command.common —12.2(8)T or higher.
This (optional) keyword is used to make sure thatI hope this article was very informative and
all session identification (ID) information that ishelped you quickly understand the usage of the
sent out for a given call is identical. Remember,aaa session-id unique command. If you need to
even if you don’t configure a router usinglearn more; I suggest you visit my website, were
the “common” keyword, the router willyou’ll find the latest information regarding
perform this way by default. So, in actuality; ifthe Cisco CCNA (640-553) Security exam
you were to type the command no aaa session-idtechniques.