AAA refers to authentication, authorization, and accounting, which is a common security framework that ensures only authorized users have access to network resources and their activities are monitored and logged. Authentication verifies a user's identity, authorization determines which resources they can access, and accounting tracks resource usage. The most common AAA protocols are RADIUS, which uses UDP ports 1645 and 1812, and TACACS+, which allows remote access servers to validate users with an authentication server.
AAA refers to authentication, authorization, and accounting, which is a common security framework that ensures only authorized users have access to network resources and their activities are monitored and logged. Authentication verifies a user's identity, authorization determines which resources they can access, and accounting tracks resource usage. The most common AAA protocols are RADIUS, which uses UDP ports 1645 and 1812, and TACACS+, which allows remote access servers to validate users with an authentication server.
AAA refers to authentication, authorization, and accounting, which is a common security framework that ensures only authorized users have access to network resources and their activities are monitored and logged. Authentication verifies a user's identity, authorization determines which resources they can access, and accounting tracks resource usage. The most common AAA protocols are RADIUS, which uses UDP ports 1645 and 1812, and TACACS+, which allows remote access servers to validate users with an authentication server.
AAA refers to authentication, authorization, and accounting, which is a common security framework that ensures only authorized users have access to network resources and their activities are monitored and logged. Authentication verifies a user's identity, authorization determines which resources they can access, and accounting tracks resource usage. The most common AAA protocols are RADIUS, which uses UDP ports 1645 and 1812, and TACACS+, which allows remote access servers to validate users with an authentication server.
Download as PPTX, PDF, TXT or read online from Scribd
Download as pptx, pdf, or txt
You are on page 1/ 9
Authentication,
Authorization, Accounting What is AAA?
• Authentication, authorization, and accounting (AAA) refers to a
comman application security framework for network and application access. • AAA uses effective network management that keeps the network secure by ensuring that only those who are granted access are allowed and their activities while in the network are also monitored and logged. Authentication : Who are you?
• Authentication is the first in the AAA security process.
• Identifying a user and ensure the user is whom they claim to be. • The user enter a valid username and password before they are granted access.
Authorization : What resource are you permitted to use?
• Authorization refers to the process of enforcing policies.
• Determining the activities, resources, a user is permitted to use. • User are assigned authorization levels that define their access. Accounting : What resources were accessed, at what time, by whom, and what commands were issued?
• Resources users consume during access to a network or
application. • Ensure that an audit will enable administration to login and view actions performed, by whom, and at what time.
. AAA Protocols
There are two most commonly used protocols in implementing AAA,
Authentication, Authorization, and Accounting in the network. RADIUS and TACACS+ are open standards that are used by different vendors to ensure security within the network. • Remote Authentication Dial-In User Service (RADIUS) – is a networking protocol operating on ports UDP 1645 and UDP 1812 that provides centralized AAA management for users who connect and use Network Access Server (NAS), such as VPN concentrator, router, and switch.
• This client/server protocol and software enables remote access
servers to communicate with a central server to perform AAA operations for remote users. • Terminal Access Controller Access-Control System Plus (TACACS+) – is a remote authentication protocol, which allows a remote access server to communicate with an authentication server to validate user access onto the network.
• TACACS+ permits a client to accept a username and password and
pass a query to a TACACS+ authentication server. Thank you