| Overview

This module will present an overview of the authentication, authorization, and accounting (AAA) architecture and show its importance of identity services in network security. AAA security is one of the primary components of the overall network security policy of an organization. AAA is essential to providing secure remote access to the network and remote management of network devices. After a brief discussion of AAA, several authentication methods will be discussed.

A network access server (NAS) provides a way for remote users to gain access to company resources after being authenticated. This authentication can be provided by the NAS or AAA Server located on the network. This module also discusses how the Cisco Secure Access Control Server (ACS) works in conjunction with AAA servers.

During the discussion of Cisco Secure ACS, the student will learn about the capabilities of Cisco Secure ACS 3.x for Windows and Cisco Secure ACS 2.3 for UNIX.

The student will also learn about Terminal Access Controller Access Control System Plus (TACACS+), Remote Authentication Dial-In User Service (RADIUS), and how both can be used in a network to provide authentication and authorization. This section will provide detailed information on these services.

Finally, there will be an overview of Authentication Proxy technology and how it provides the network administrator with more flexibility in securing access to the network.

NOTE: It is required that the student study the commands covered in the chapter using the labs and the command reference. Not all required commands are covered in sufficient detail in the text alone. Successful completion of this course requires a thorough knowledge of command syntax and application.