Solved both SSH and NTP. Thank you Keith for the lab and videos. I always enjoy watching your videos on both TH-cam and CBT nuggets. I have learned more from you then I have ever have from books.
This video addresses multiple items in the Cisco CCNA 200-301 blueprint! Thanks for watching. If you downloaded the lab and worked on it, post a comment like "I did the lab" "Solved it" "Even did the NTP" or similar. Practice practice practice... and have fun doing it. Cheers!
Hi Keith, I did the lab and solved almost everything (including NTP) but for some reason, bob user is not accepted. I can log in from the mobile device with lois and I even created a completely different user which works like a charm, but bob doesn't and I have no idea why. Is there anything that I am missing or is it just some sort of packet tracer thing? Thanks
JOB COMPLETE ! and I loved it. Even manged to lock the local aaa username, which had me scratching my head at my aaa authentication configuration first, till i started to play with 'show aaa' commands. Thanks again Keith.
working in a big enterprise it was easy so far to get by without deeply understanding aaa and solving issues just by comparing configurations on devices that work with the ones that don't. today I started to feel this was not enough during troubleshooting and started watching your video, that gave me the spark of inspiration to resolve the issue - even though it was not caused by aaa config as I initially thought. :D :D :D thank you for these videos, I learn so much from you.
I fixed it all, including NTP and Guest Device Connectivity, but..... that doesn't mean I fully comprehend all of the configuration topics covered, so I'm glad you have provided a walk-through that I'm going to go look at now. Thank you for the insight into these topics
Got Bob's SSH working as well as synchronizing NTP on MLS1. I struggled a bit with the SSH authentication until I listened more closely to your description of how the method statements work. Thanks Keith!
Thank you Arvind Kumar! Way to go. Just working on the lab is amazing, and shows you are serious about continuing to learn and grow your skills. Thanks for the comments and the work. Cheers.
thank you keith.amazing lab.need to watch the wifi, WLAN, WLC to solve the appipa issue. ssh and ntp solved smoothly. thank you for helping us understand networking while having fun :) stay safe. Best, from mozambique
Just got done with a Security class at my College... Final was a lab with AAA, ASDM configuration with a SSL connection to a PC always good to go back and watch the basics tho
I ended up solving everything but had multiple buggy issues. For example, once you have everything working, I powered off the server to validate it fails over to local databases which it does, but when powering the server back on it does not work only on local accounts. Also when running the lab the first time bob would not connect, Lois would and any other account I would create would, however, bob would not connect until I just re-did the lab from scratch. Overall very fun lab!
You explain those commands in 10:40 in which I am really looking for it. I got a better understanding. Thank you I am very recommending this video to everyone. Give ya both like and subscribe!
Havent worked on packet tracer for sometime, tried the lab however , i couldnt make the bob device get an ip address, checked the dhcp setting and all looks good but bob smartphone is not getting an ip address its getting apipa address, i did tweak the authentication bit under vty and picked a method , but still bob cant connect to Access point to get a ip address.
I can say this, once I got an RF connection established to the Employee Device, it pulled a valid IP address from the DHCP server immediately, without any trouble-shooting for dhcp fix. So, if you have that RF connection established and not getting a valid ip on Employee Device, I would suspect a PT glitch. Maybe try saving the PT file to a new name after you get that RF connection established, close and re-open the new file you saved it as, this sometimes fixes some bugginess.
Good question! Packet tracer has it's limitations. In a working AAA network, we could also specify Bob's rights and privilege levels when he gets the CLI to the router. This would be part of authorization.
Thank you Troy Sipple for working on that lab! Hands on practice is one of the best ways to build your skills, and get better. Thank you! Practicing the NTP with authentication is a useful thing to know. Thanks for posting.
Keith, what if the method 2 is being used and there is a local user on the MLS1? aaa authentication login method2 local group tacacs+ none if a user tries to log in but the id and password does not match with the local SW users, then the Switch will proceed to check the group tacacs+ o just wont work?
Thank you wally19. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord Thanks again wally19!
hi Keith. can you please explain the difference between using aaa authentication dot1x default group RADIUS_SERVER and aaa authentication login default group RADIUS_SERVER? thank you
hi, i have a question, is it possible for wireless device that connected to wireless SSID CorpWiFi which is vlan 10 (network 10.20.0.0) , and GuestWiFi which vlan 20 (10.20.0.0) have it's own network ip address of dhcp, instead of using ip address of vlan 30 which is vlan that hosted WLC, SRV and all AP ? I created different pool of dhcp for each network and use ip helper on each int vlan but it did not work :(
Can i ask for help? i configured aaa new model to my ISR 4331 and username and password was not set. but when i tried to access my router, it is asking for a username and password. tried cisco as username and pass but failed to authenticate. trying to enter rommon but it wont pushthrough when i tried to break while booting. Thank you. hope you can give me some help.
Thank you paulo laniog. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord Thanks again paulo laniog!
so i do this thing where i would youtube videos on how to do things and as soon as i get enough information to try it, i'll pause the video and set up my own lab to try... and so when i was listening to your video, you were like.... i locked myself out during a ccie exam i was like... how did he manage to do that... he must be a noob... so i go off to configure aaa. I set it up on one router, aaa authentication method local group tacacs+ group radius enable, set up domain-name, ssh, version 2, transport input ssh. Go to the other router to try to log in... successful, forgot to set up enabled password so i can't get into privileged mode. Go back to R1 to set that, try it again and it works... i'm happy, so i start setting it up on R2, but didn't do everything i did the first time.. I get detracted and when i get back to R2, its asking for username now.. and none was set lol :P
@@Atuor I'm having the same issue as Bruno Luis, who replied directly to Keith's first post. Defined a local username password database on MLS1 but still receive "invalid logon error". I can login with the Lois creds and define another account but username bob will not allow an active ssh session unless I disable aaa service.
Thank you Zenna. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord Thanks again Zenna!
Always a good idea to checkout the latest version Especially for CCNA 200-301 info. I'd recommend version 7.3 for the new stuff if you come across older material then 7.2.2 should work fine
![[TH] 2024 PMSL SEA W1D5 | Fall | เก็บแต้มของจริง คือวันนี้](http://i.ytimg.com/vi/EciIAlCXg5k/mqdefault.jpg)
Solved both SSH and NTP. Thank you Keith for the lab and videos. I always enjoy watching your videos on both TH-cam and CBT nuggets. I have learned more from you then I have ever have from books.
Thank you Tyler Simonsen! Way to take on that lab!
This video addresses multiple items in the Cisco CCNA 200-301 blueprint! Thanks for watching. If you downloaded the lab and worked on it, post a comment like
"I did the lab"
"Solved it"
"Even did the NTP"
or similar.
Practice practice practice...
and have fun doing it.
Cheers!
Hi Keith, I did the lab and solved almost everything (including NTP) but for some reason, bob user is not accepted. I can log in from the mobile device with lois and I even created a completely different user which works like a charm, but bob doesn't and I have no idea why. Is there anything that I am missing or is it just some sort of packet tracer thing? Thanks
If you got another user working, but not Bob, it is likely at PT thing. Nice work Bruno!!!!!
i had the same probleme, i can not login with bob but with new user or lois without problem.
JOB COMPLETE ! and I loved it. Even manged to lock the local aaa username, which had me scratching my head at my aaa authentication configuration first, till i started to play with 'show aaa' commands. Thanks again Keith.
Way to go Kris Morrison!
this comment is what made me realize what my issue was.... thanks
working in a big enterprise it was easy so far to get by without deeply understanding aaa and solving issues just by comparing configurations on devices that work with the ones that don't. today I started to feel this was not enough during troubleshooting and started watching your video, that gave me the spark of inspiration to resolve the issue - even though it was not caused by aaa config as I initially thought. :D :D :D thank you for these videos, I learn so much from you.
Thank you 🌟Stellaaa Kowalski🌟! So glad to hear you took it on, and solved it. Way to go!
I solved both the SSH and NTP... i love it... Thank you so much @keith Barker for all you do in the IT community. We truly appreciate you!!!
Thank you Tawakalitu!
I already have my ccna but I keep watching these.
Thank you Troy Sipple!
I wish this guy was my dad. Didn't have one and Keith is such a great man and instructor. His family is lucky.
Thank you EX!
Sorry I don't finish the homework cuz I just find your video out randomly on youtube today but I am ready to enjoy the lab you give, thanks Keith
I fixed it all, including NTP and Guest Device Connectivity, but..... that doesn't mean I fully comprehend all of the configuration topics covered, so I'm glad you have provided a walk-through that I'm going to go look at now. Thank you for the insight into these topics
Excellent!
Can you post a link to the walk though. I got AAA working but NTP will not sync even though I have an association with the server?
@@michaelbays4424 th-cam.com/video/OzaU0C7HLHs/w-d-xo.html
Im still amazed how u can type fast with no error while talking. You are a beast! I learned fhrp stuffs in minutes!
Thank you Jayson!
Done with the lab, including the bonus! Thank you, Keith!
Thank you Lester Marcos for working on that lab! Hands on practice is one of the best ways to build your skills, and get better. Thank you!
Got Bob's SSH working as well as synchronizing NTP on MLS1. I struggled a bit with the SSH authentication until I listened more closely to your description of how the method statements work. Thanks Keith!
Thank you Scott Treaster for working on that lab!
Merry Christmas Keith. Just came across this lab. Solved the ssh and ntp for the lab. Also connected smartphone employee device to AP1. Stay safe.
Thank you Cecil B for working on that lab! Hands on practice is one of the best ways to build your skills, and get better. Thank you!
Got both issues solved! As Always, you rock Keith. Thanks for making me better and making learning fun 🔥
Thank you Trey Graham for working on that lab! Hands on practice is one of the best ways to build your skills, and get better. Thank you!
You are a great teacher Keith, thank you so much. I am loving your channel!
Thank you @jacobsteele2929!
CCIE in 2003 my God...i am still in CCNP in 2020...Keith you are really Ancient..
Thank you Yakov Matityahu! Yes, been doing this for a while. My first CCIE was in 2001. #6783
Happy studies, and thanks for watching.
@@KeithBarker Thank you Keith.
Completed the lab! Thanks, Keith! (even got the bonus!)
Thank you Jason Collins!
I did it but don;t ask me how much time I took. NTP was easy, AAA took time. Love for Keith.
Thank you Arvind Kumar! Way to go. Just working on the lab is amazing, and shows you are serious about continuing to learn and grow your skills. Thanks for the comments and the work.
Cheers.
Very interactive person you are. Thanks Keith you made this interesting to learn.
Glad you enjoyed it
Thanks Keith. Another productive Saturday for me during the quarantine period.
Thank you T G!
thank you keith.amazing lab.need to watch the wifi, WLAN, WLC to solve the appipa issue. ssh and ntp solved smoothly. thank you for helping us understand networking while having fun :) stay safe. Best, from mozambique
Top man - I enjoy your lectures and mostly in the spirit it is delivered. Thank you very much.
Happy to do it, thanks for the feedback Chaminda Tilakumara.
loved the lab - solved both ssh and ntp - Thanks for everything you do...
Thank you Paul Lagatta for working on that lab! Hands on practice is one of the best ways to build your skills, and get better. Thank you!
you the man keith >>>
Thank you darwyn Phillips!
Did it and got NTP in place. Thanks, Keith!
Thank you Hank Foss! Nice work.
Thanks a lot for this lab. Enjoyed the challenge. Took some time, but completed both tasks.
Excellent!
Thans Keith.Solved both SSH and NTP.Thank you very for Labs.It refreshes the knowledge.
Thank you Suminda Panditharatne! Way to go.
I did it including the bonus. :) Thanks for the videos
Thanks Keith!
Thank you Keith
solved both! Thanks for the video Keith.
Way to go Juan Rodriguez!
Just got done with a Security class at my College... Final was a lab with AAA, ASDM configuration with a SSL connection to a PC always good to go back and watch the basics tho
Thank you Michael Fields
Fixed both issues... Thanks Keith
Thank you Karera Tony! Way to go, thanks for doing the lab!
Yep, totally a nightmare... Thanks for the video Keith!
Thank you Escuela de Redes! Way to take it on! My pleasure.
Happy studies.
I love your explanation. 👍😆
Thanks! 😃
Nice work
Thank you! Cheers!
Finished the lab + bonus :) Hope I did it the correct way.
Nice work!
I ended up solving everything but had multiple buggy issues. For example, once you have everything working, I powered off the server to validate it fails over to local databases which it does, but when powering the server back on it does not work only on local accounts. Also when running the lab the first time bob would not connect, Lois would and any other account I would create would, however, bob would not connect until I just re-did the lab from scratch. Overall very fun lab!
Thank you Allan! Way to tackle it!!!!! I appreciate your work.
You explain those commands in 10:40 in which I am really looking for it. I got a better understanding. Thank you I am very recommending this video to everyone. Give ya both like and subscribe!
Solved on both SSH and NTP. It take me a long time to get the clue before I realized that you can actually remote it using command prompt.
Thank you Bali Mushroom for working on that lab! Hands on practice is one of the best ways to build your skills, and get better. Thank you!
Did the homework solve the login issue with bob and the NTP :O)
Solve everything
i did it keith!! but not sure i am correct though!!
ntp / aaa both solved.. that was a fun one
Thank you kaos3i6!
Great
Thanks Bob❤
:)
Finished it! PacketTracer seemed a little buggy, had to reconnect each interface in order for the ports to go Up.
Way to go Atuor!
Got the connectivity issue but only after watching your WiFi, WLAN lab build video. NTP is proving harder..still working on it
Sorted. Bob is happy/connected and NTP is working.
Cheers from the UK mate
Havent worked on packet tracer for sometime, tried the lab
however , i couldnt make the bob device get an ip address, checked the dhcp setting and all looks good but bob smartphone is not getting an ip address its getting apipa address,
i did tweak the authentication bit under vty and picked a method , but still bob cant connect to Access point to get a ip address.
Try reconnecting the interfaces on the MLS.
I have the same issue, could not solve problem.
I can say this, once I got an RF connection established to the Employee Device, it pulled a valid IP address from the DHCP server immediately, without any trouble-shooting for dhcp fix. So, if you have that RF connection established and not getting a valid ip on Employee Device, I would suspect a PT glitch. Maybe try saving the PT file to a new name after you get that RF connection established, close and re-open the new file you saved it as, this sometimes fixes some bugginess.
nailed it thanks
Thank you for taking it on Mark!
Is there a video on how you completed the lab?
Lab completed. Its a celebration 👌 great video. So bob will have a privilege level 0. How can I change bob privilege level?
Good question! Packet tracer has it's limitations. In a working AAA network, we could also specify Bob's rights and privilege levels when he gets the CLI to the router. This would be part of authorization.
Keith Barker 😯 ok thank you 😃
What is the name of the pen app you use and you mentioned it quick? Can you please share?
I solved it. I had to read up on NTP authentication.
Thank you Troy Sipple for working on that lab! Hands on practice is one of the best ways to build your skills, and get better. Thank you! Practicing the NTP with authentication is a useful thing to know. Thanks for posting.
Hi, I am just into networking, may I know where can I get the answer to check if I am correct?
I tried the aaa and now I have username to comply but I don't know what should I put it. Don't know too how can I solve it.
can I use AAA for authentication, authorization and accountability purpose for my users to access my other servers in the same network?
Keith, what if the method 2 is being used and there is a local user on the MLS1?
aaa authentication login method2 local group tacacs+ none
if a user tries to log in but the id and password does not match with the local SW users, then the Switch will proceed to check the group tacacs+ o just wont work?
Thank you wally19. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again wally19!
hi Keith. can you please explain the difference between using aaa authentication dot1x default group RADIUS_SERVER and aaa authentication login default group RADIUS_SERVER? thank you
hi, i have a question, is it possible for wireless device that connected to wireless SSID CorpWiFi which is vlan 10 (network 10.20.0.0) , and GuestWiFi which vlan 20 (10.20.0.0) have it's own network ip address of dhcp, instead of using ip address of vlan 30 which is vlan that hosted WLC, SRV and all AP ? I created different pool of dhcp for each network and use ip helper on each int vlan but it did not work :(
Thank you Heng KAING! Yes that is possible, but unfortunately Packet Tracer doesn't implement all the literal function that a real WLC and AP would.
Can i ask for help? i configured aaa new model to my ISR 4331 and username and password was not set. but when i tried to access my router, it is asking for a username and password.
tried cisco as username and pass but failed to authenticate.
trying to enter rommon but it wont pushthrough when i tried to break while booting.
Thank you. hope you can give me some help.
Thank you paulo laniog. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again paulo laniog!
so i do this thing where i would youtube videos on how to do things and as soon as i get enough information to try it, i'll pause the video and set up my own lab to try... and so when i was listening to your video, you were like.... i locked myself out during a ccie exam i was like... how did he manage to do that... he must be a noob... so i go off to configure aaa. I set it up on one router, aaa authentication method local group tacacs+ group radius enable, set up domain-name, ssh, version 2, transport input ssh. Go to the other router to try to log in... successful, forgot to set up enabled password so i can't get into privileged mode. Go back to R1 to set that, try it again and it works... i'm happy, so i start setting it up on R2, but didn't do everything i did the first time.. I get detracted and when i get back to R2, its asking for username now.. and none was set lol :P
Thank you Avery Carty! Your hands on practice is one of the best ways to learn and re-enforce your skills. Thanks for the note!!!
Keith, I've finished the lab however I don't believe bob can ssh successfully to the MLS in packet tracer. Perhaps a bug.
What error did you encounter which led you to that conclusion?
@@Atuor I'm having the same issue as Bruno Luis, who replied directly to Keith's first post. Defined a local username password database on MLS1 but still receive "invalid logon error". I can login with the Lois creds and define another account but username bob will not allow an active ssh session unless I disable aaa service.
what is the title of the song?
Hi Keith how do we find the answers to the lab to check our work?
Thank you Zenna. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again Zenna!
@@KeithBarker Thanks Keith I will do!
Which version of Packet Tracer is require to run this Lab???
Always a good idea to checkout the latest version Especially for CCNA 200-301 info. I'd recommend version 7.3 for the new stuff if you come across older material then 7.2.2 should work fine
7.3
Can you make one lab that contain both roas and hsrp/glbp ?
Bulllet Maz thanks for your input! I can add that to my queue. Stay tuned, and thanks for the suggestion.
50 rupya kaat re : akshay kumar 😂😂😂