A A A - created from Mind Map

Page 1

Authentication<br><br><ul><li>Who You Are

What is your Username, Password, Certificate etc.</li></ul>

Authorization<br><br><ul><li>Defines what you are allowed to do

For device administration

• Privilege-level

• Allowed commands

For network access

• VLAN

• Access-list

• Security Group Tag

• Encryption

• VPN split-tunneling policy</li></ul>

Accounting<br><br><ul><li>Provides evidence of what you have done, like auditing

For network administration

• Commands are logged for forensics analysis

For network access

• Session statistics for billing

• Session identification (MAC address, IP address, username)

• Session state (connected or disconnected)</li></ul>

Three-Party Authentication Model

Authenticator

Supplicant / End-Client

Authentication Server