Authentication, Authorization and Accounting

Authentication, Authorization and Accounting

1. Authentication

   • Who is allowed to connect
     • ACS
       • RADIUS
       • TACACS+
   • CISCO Methods
     • Local AAA
       • Services
         • Administrative Access
     • Server-Based AAA
     • Login Methods
       • aaa authentication login
   • Debug Options
     • Troubleshooting authentication issues
       • debug aaa
     • GETUSER and GETPASS status messages

2. Authorization

   • What they are allowed to do
     • PASS
     • FAIL
     • Users access to certain areas
     • User access to specific services
   • TACACS+
     • Allows the separation of authentication from authorization
   • aaa authorization
     • network
     • exec
     • commands
   • authentication port-control

3. Accounting

   • How network resources are used.
     • Purposes
       • Start and Stop connection times
       • Auditing
       • Biling
   • Types of information
     • Network Accounting
     • Connection Accounting
     • EXEC Accounting
     • System Accounting
     • Command Accounting
   • Method list
     • The way accounting is performed and the sequence in which these methods are performed.

Bilder und Dateien der Mindmap