Authentication, Authorization, and Accounting(AAA)

Authentication, Authorization, and Accounting(AAA)

1. Purpose of the AAA

   • Authentication - Users and administrators must prove that they are who they say they are.
     • Authorization - authorization services determine which resources the user can access and which operations the user is allowed to perform.
       • Accounting and auditing - Accounting records what the user does.
   • Authentication Modes
     • Local AAA Authentication
       • The system administrator must populate the local security database by specifying username and password profiles for each user that might log in.
       • Comparing Local AAA and Server-Based AAA Implementations
     • Server-Based AAA Authentication
       • TACACS+ and RADIUS are both authentication protocols that are used to communicate with AAA servers.
         • TACACS+
           • authorization and accounting( port 49)
         • RADIUS
           • authentication and authorization

2. Integración de AAA con Active Directory

   • Microsoft Windows Server can also be configured as a AAA server