Конфиг Cisco (функция auth-proxy)

Building configuration...

Current configuration : 3500 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime localtime
no service password-encryption
!
hostname Rezerv
!
boot-start-marker
boot-end-marker
!
no logging console
!
aaa new-model
!
!
aaa authentication login default group tacacs+ local enable
aaa authorization auth-proxy default group tacacs+
!
aaa session-id common
ip cef
!        
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.4.1 192.168.4.2
!
ip dhcp pool cisco
   network 192.168.4.0 255.255.255.0
   default-router 192.168.4.1
   dns-server 8.8.8.8
!
!
ip auth-proxy auth-proxy-banner http ^CPrivetstvie !!!^C
ip auth-proxy max-nodata-conns 3
ip auth-proxy inactivity-timer 1
ip auth-proxy name HQ_users http inactivity-time 60
ip admission auth-proxy-banner http ^CPrivetstvie !!!^C
ip admission max-nodata-conns 3
ip admission inactivity-timer 1
ip sla monitor 1
 type echo protocol ipIcmpEcho 10.0.0.1 source-interface FastEthernet0/1
 request-data-size 8
 timeout 1
 frequency 1
ip sla monitor schedule 1 life forever start-time now
ip sla monitor 2
 type echo protocol ipIcmpEcho 192.168.2.2 source-interface Vlan2
 request-data-size 8
 timeout 1
 frequency 1
ip sla monitor schedule 2 life forever start-time now
!
!
!
username admin privilege 15 password 0 cisco
!
!
no ip rcmd domain-lookup
ip rcmd rsh-enable
ip rcmd remote-host root 192.168.4.3 root enable
!
track 1 rtr 1
 delay down 1 up 1
!
track 2 rtr 2
 delay down 1 up 1
!
!        
!
!
interface Loopback0
 no ip address
!
interface FastEthernet0/0
 ip address 192.168.3.1 255.255.255.0
 ip flow ingress
 ip flow egress
 ip nat inside
 ip virtual-reassembly
 ip route-cache flow
 ip policy route-map backup
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip address 10.0.0.2 255.0.0.0
 ip access-group 100 out
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface FastEthernet0/0/0
 switchport access vlan 2
!
interface FastEthernet0/0/1
 switchport access vlan 3
!
interface FastEthernet0/0/2
 switchport access vlan 3
!
interface FastEthernet0/0/3
 switchport access vlan 5
!
interface Vlan1
 no ip address
!
interface Vlan2
 ip address 192.168.2.1 255.255.255.0
 ip access-group 101 out
!
interface Vlan3
 ip address 192.168.4.1 255.255.255.0
 ip nat inside
 ip auth-proxy HQ_users
 ip virtual-reassembly
!
interface Vlan5
 ip address 192.168.101.161 255.255.255.0
 ip nat outside
 ip virtual-reassembly
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.101.21
!
ip flow-export version 5
ip flow-export destination 192.168.4.3 2055
!
ip http server
ip http access-class 61
ip http authentication aaa
no ip http secure-server
ip nat inside source static tcp 192.168.3.2 5000 interface FastEthernet0/1 5000
ip nat inside source static 192.168.4.3 192.168.101.162
!
logging trap debugging
logging facility local0
logging 192.168.4.3
access-list 15 permit 10.0.0.2
access-list 61 deny   any
access-list 100 deny   ip host 10.0.0.2 host 192.168.2.2
access-list 100 permit ip any any
access-list 101 deny   ip host 192.168.3.2 host 10.0.0.1
access-list 101 permit ip any any
snmp-server community parol RW 1
!
route-map backup permit 10
 match interface FastEthernet0/0
 set ip next-hop verify-availability 10.0.0.1 10 track 1
 set ip next-hop 192.168.2.2
!
!
tacacs-server host 192.168.4.3
tacacs-server key cisco
!
control-plane
!
!
banner login ^CLocal: login admin, password cisco, via Tacacs+: login dimon, password cisco^C
!        
line con 0
line aux 0
line vty 0 4
!
scheduler allocate 20000 1000
end