Managing Cisco Network Security
Manage the security of Cisco-based networks with the strategies detailed in this book.
TABLE OF CONTENTS Managing Cisco Network Security
Chapter 6: Cisco Authentication, Authorization, and Accounting Mechanisms
Introduction
Authentication, authorization, and accounting (AAA) provide the required framework to configure access control. This chapter will give an overview of the AAA mechanisms provided on the Cisco router and RAS.
Authentication is the process of verifying the identity of an entity. This process is usually done by exchanging information to prove one s identity. This information can take many forms: password, token, and a one-time password, among others.
Authorization is the process of giving permission to an entity to access a system resource. For example, network access can be restricted based on the identity of a client.
Accounting enables the network manager to keep track of the services and resources that are used by the users. The accounting process collects information such as the connection time, identity, and billing information.
Cisco AAA mechanisms support security protocols such as the Remote Access Dial-In User Service (RADIUS), the Terminal Access Controller Access Control System Plus (TACACS+), and Kerberos. This chapter will provide configuration examples of how AAA is applied in such situations as remote dial-in users and a Cisco Secure PIX Firewall.
AAA Overview
In its most basic form, authentication typically consists of a username and password for an individual to gain access to services or resources. Although used quite frequently in network security, it is the weakest type of authentication. With this type of security, you are prompted for your username when accessing a resource or service; upon entering your username, you are prompted for a password. What if the resource...
Copyright Syngress Publishing, Inc. 2000 under license agreement with Books24x7
