Đang chuẩn bị nút TẢI XUỐNG, xin hãy chờ
Tải xuống
Hình 18-4 cho thấy chỉ một phần của báo cáo bảo mật. Phần còn lại của báo cáo có thể được xem bằng cách kéo thanh cuộn xuống. Báo cáo cho thấy một tình trạng thông qua hoặc không được thông qua cho mỗi tiêu chí đánh giá. | 514 Chapter 20 Using AAA to Scale Access Control Foundation Summary AAA consists of three components outlined in Table 20-10. Table 20-10 AAA AAA Component Answers This Question Additional Authentication Who am I Username password combination Authorization Am I allowed to do this May assign IP addresses etc. Accounting What have people done When was it done and for how long AAA has two access modes character and packet. The mode is determined by the interface. Review Table 20-11 as a guide to the interfaces and their associated modes. Table 20-11 AAA Access Modes Interface Mode Description Aux Character Auxiliary DTE ports Console Character Console port TTY Character Async port vty Character Virtual terminal line PPP Packet PPP on serial or ISDN interface Arap Packet AppleTalk Remote Access protocol on serial interfaces NASI Packet NetWare Access Server Interface on serial interfaces Table 20-12 outlines the differences between RADIUS and TACACS . Table 20-12 RADIUS and TACACS Differences RADIUS TACACS UDP TCP Password encryption Packet encryption Not multiprotocol Multiprotocol No individual command control Individual command control Supports basic interoperability Proprietary system Foundation Summary 515 The CLI commands are simple and effective. 1. Turn on AAA using the aaa new model command. 2. Set the server addresses using the radius-server host or tacacs-server host command. 3. Set the server key with the radius-server key or tacacs server key command. 4. Set the authentication method with the aaa authentication command. 5. Set the Authorization levels with the aaa authorization command. 6. Set accounting with the aaa accounting command. Review the following eight commands aaa new-model radius-server host hostname ip-address auth-port port-number acct-port portnumber timeout seconds retransmit retries key string alias hostname ipaddress tacacs-server host hostname ip-address key string nat port integer singleconnection timeout integer radius-server key 0 .
