Authentication, authorization and accounting

Authentication, authorization and accounting

1. Managing Administrative Access

   • Password Only Method
   • Local Database Method
   • AAA Local Authentication
     • 1. The client establishes a connection with the router.
     • 2. The AAA router prompts the user for a username and password.
     • 3. The router authenticates the username and password using the local database and the user is authorized to access the network based on information in the local database.
   • Server-Based AAA Authentication
     • 1. The client establishes a connection with the router.
     • 2. The AAA router prompts the user for a username and passw ord.
     • 3. The router authenticates the username and password using a remote AAA server.
     • 4. The user is authorized to access the network based on inform ation on the remote AAA Server.

2. AAA Benefits

   • Increased flexibility and control of access configuration
   • Scalability
   • Multiple backup systems
   • Standardized authentication methods (RADIUS, TACACS+ and Kerberos)

3. Implementing Local AAA Authentication

   • Configuring Authentication
   • Configuring Local AAA Authentication
   • Configuring Local Authentication Using CCP

4. Implementing Server-Based AAA Authentication

   • TACACS+ / RADIUS

5. Cisco Secure ACS

   • Benefits
   • Options

6. Server-Based Authorization

7. Server-Based Accounting

Images and files in the map