思科ccnp认证aaa.pptVIP

NuAiko TAC Ltd. CCNP培训课程之BCRAN NuAiko TAC Ltd. CCNP培训课程之BCRAN Cisco安全选项概述 思科ACS概述 思科ACS组件 思科ACS软件预览 AAA定义 Authentication（认证） Who are you? Authorization（授权） What can you do? Accounting（记帐） What did you do and how long did you do it? 路由器的访问方法 AAA 协议 AAA 配置方法 启用AAA并指明ACS服务器 AAA认证命令 字符模式认证示例 AAA授权命令 字符模式授权示例 包模式示例 AAA记帐命令 AAA记帐示例 NuAiko TAC Ltd. CCNP培训课程之BCRAN Purpose: This figure shows an overview of Cisco access control solutions. Emphasize: This is only an overview. For more comprehensive training on Cisco security, attend the Managing Cisco Network Security (MCNS) course. Transition: The next figure shows how CiscoSecure ACS provides AAA. * NuAiko TAC Ltd. CCNP培训课程 -BCRAN 第二章 AAA 基本的安全设备和路由器的安全 ACS就是用来提供AAA功能的服务器,用来对用户的行为进行认证、授权、审计 ACS三大组件之间的关系 模式 路由器端口 AAA 命令元素 字符模式 tty,vty,aux,con login,exec(线路模式或者 nasi connection 交互模式) enable,command 包模式 async,group-async ppp,network (接口模式或者 BRI,PRI,serial,dialer 链路协议会话) profiles,dialer rotaries 这里的KEY值和AAA服务器（ACS）上是相同的,是ACS用来对路由器的合法身份进行验证 Group 关键字后面的参数为验证的顺序,当一个环节无法验证（注意不是验证失败的意思）会执行下一个环节的验证 如果未指定,那么ROUTER会使用login default中定义的验证方式 当用户不是对ROUTER进行LOGIN操作,而是通过ROUTER进行网络的访问,需要设置成包模式 本章完 Purpose: This figure introduces students to various physical WAN connections. Emphasize: Dedicated lines have point-to-point connections that are indefinitely reserved for transmissions, rather than being switched as transmission is required. Typically, a dedicated connection is made using serial lines. Circuit-switched connections are dedicated physical circuit paths established only during the duration of a call. Physical circuit switched examples are asynchronous serial and Integrated Services Digital Network (ISDN). Packet-switched networks use packet switching technology for data transfer. Evolving physical connections not discussed in this course follow: Digital subscriber line (DSL)—DSL