AAA

AAA

1. Characteristics

   • Authentication Modes
     • Local AAA
       • Cisco router
     • Server-Based
       • Router AAA
       • RADIUS
       • TACACS+
   • Authorization
     • Implemented using AAA server-based
     • This is similar role-based CLI
       • provilege levels
   • Accounting
     • Implemeted using a AAA server-based
     • ACS server
     • Types
       • Network
       • System
       • Command
       • Exec

2. Server-Based

   • ACS
     • Tacacs
     • Radius
   • Communications Protocols
     • Tacacs
       • TCP
       • Bidirectional/CHAP
       • Mostly Cisco Supported
       • entire Packet encrypted
     • Radius
       • UDP
       • Unidirectional
       • Password encrypted
       • Open/RFC
   • Authentication
     • Establishes a conection
     • Username and pasword
     • Username and pasword to the ACS
     • ACS authenticates the user

3. Configure

   • local-case
   • aaa authentication login
     • console
     • aux
     • vty lines
   • aaa new-model
   • no authentication login
     • return to the default method