0% found this document useful (0 votes)
22 views9 pages

Authentication, Authorization, Accounting

Download as pptx, pdf, or txt
Download as pptx, pdf, or txt
Download as pptx, pdf, or txt
You are on page 1/ 9

Authentication,

Authorization, Accounting
What is AAA?

• Authentication, authorization, and accounting (AAA) refers to a


comman application security framework for network and
application access.
•  AAA uses effective network management that keeps the network
secure by ensuring that only those who are granted access are
allowed and their activities while in the network are also monitored
and logged.
Authentication : Who are you?

• Authentication is the first in the AAA security process.


• Identifying a user and ensure the user is whom they claim to be.
• The user enter a valid username and password before they are
granted access.

Authorization : What resource are you permitted to use?

• Authorization refers to the process of enforcing policies.


• Determining the activities, resources, a user is permitted to use.
• User are assigned authorization levels that define their access.
Accounting : What resources were accessed, at what time, by
whom, and what commands were issued?

• Resources users consume during access to a network or


application.
• Ensure that an audit will enable administration to login and view
actions performed, by whom, and at what time.

.
AAA Protocols

There are two most commonly used protocols in implementing AAA,


Authentication, Authorization, and Accounting in the network.
RADIUS and TACACS+ are open standards that are used by
different vendors to ensure security within the network.
• Remote Authentication Dial-In User Service (RADIUS) – is a
networking protocol operating on ports UDP 1645 and UDP 1812
that provides centralized AAA management for users who connect
and use Network Access Server (NAS), such as VPN
concentrator, router, and switch.

• This client/server protocol and software enables remote access


servers to communicate with a central server to perform AAA
operations for remote users.
• Terminal Access Controller Access-Control System Plus
(TACACS+) – is a remote authentication protocol, which allows a
remote access server to communicate with an authentication server
to validate user access onto the network.

• TACACS+ permits a client to accept a username and password and


pass a query to a TACACS+ authentication server.
Thank you

You might also like