AAA

AAA

1. Components

   • Authentication
     • Local AAA
     • Server-Based AAA
   • Authorization
     • Server-Based AAA
   • Accounting
     • Server-Based AAA
     • Types of Information
       • Network
       • Connection
       • EXEC
       • System
       • Command
       • Resource

2. Local

   • Authentication Methods
     • Enable
     • Local
     • Local-case
     • None
     • Group
       • RADIUS
       • TACACS+

3. Server-Based

   • TACACS+
     • Separates authentication and authorization
     • Encrypts all communication
     • Utilizes TCP port 49
     • Accouting limited
   • RADIUS
     • Combines authentication and authorization
     • Encrypts only the password
     • Utilizes UDP
     • Supports 802.1X and Session Initiation Protocol (SIP)
     • Accouting extensive

4. Cisco Secure ACS

   • Lightweight web-based GUI
   • Administrator authentication through LDAP
   • Scheduled reports sent through email
   • Encrypted syslogs

5. Cisco Identity Services Engine (ISE)

   • Device profiling
     • Whether it is a personal or corporate device.
   • Posture assessment
     • If the device is clean of viruses and suspicious applications
   • Guest managemen
     • Grants and enforces temporary access for guest users.
   • AAA

Bilder und Dateien der Mindmap