| 11.2 |  | Authentication Configuration |
| 11.2.2 |  | AAA authentication example |

| Figure shows workstations on the 10.0.0.0 network originating outbound connections. The configuration and accompanying graphic illustrate that all users other than 10.0.0.42 must be authenticated before they are allowed out of the network. This is because those users have been specified with the include argument. However, host 10.0.0.42 is allowed to start outbound connections without being authenticated, because it has been exempted from authentication with the exclude statement.

The new include and exclude options are not backward compatible with PIX Security Appliance versions 5.0 and earlier. If there is a need to downgrade to an earlier version, the aaa authentication command statements are removed from the PIX configuration.

| Lab Activity e-Lab Activity: Authentication Configuration In this activity, the student will practice how to authenticate users.

| Resources How to Add Users to CSACS-NT