Controlling and Monitoring Users with AAA
AAA stands for Authentication, Authorization, Accounting.
It is a framework for controlling and monitor users of a computer system.
Authentication is the process of verifying a user's identity.
logging in = authentication
Authorization is the process of granting the user the appropriate access and permissions.
granting the user access to some files/services, restricting access to other files/services = authorization.
Accounting is the process of recording the user's activities on the system.
logging when a user makes a change to a file = accounting.
Enterprises typically use a AAA server to provide AAA services.
ISE (Identity Services Engine) is Cisco's AAA server.
AAA servers usually support the following two AAA protocols:
RADIUS: an open standard protocol. Uses UDP ports 1812 and 1813.
TACACS+: A Cisco propriety protocol. Uses TCP port 49.
Last updated