[Warm reminder] Need information or need to enter the group to communicate to the bottom
Principle and configuration of AAA
1. Background
AAA is the abbreviation for Authentication, Authorization, and Accounting. It provides three security functions: authentication, authorization, and accounting. AAA can be implemented through multiple protocols. For example, RADIUS
2. Application scenarios
AAA application scenarios
AAA authentication provides three security functions for user authentication, authorization and accounting
1. Authentication
Authentication: to verify whether the user can obtain the network access authority.
AAA authentication support methods include: no authentication, local authentication, remote authentication
2. Authorization
Authorization: Which services on the network can be accessed or used by authorized users
. The authorization methods supported by AAA are: no authorization, local authorization, remote authorization
3. Accounting
Accounting: Record the user's use of network resources.
The accounting methods supported by AAA are: no accounting, remote accounting
4. AAA domain
AAA can manage users through domains, and different domains can be associated with different authentication, authorization and accounting methods.
3. AAA configuration
On RTA:
aaa
authenticaton-scheme auth1
authentication-mode local
quit
authentication-scheme auth2
authentication-mode local
quit
domian zxp //Configure domain
authentication-scheme auth1
authentication-scheme authe2
quit
local-user zxp password cipher 123 //Set username and Password
local-user zxp service-type telnet //Service type is telne
local-user zxp privilege level 0 //Set priority to 0
user-interface vty 0 4 //Apply in vty mode
authentication-mode aaa //vty Enable AAA
In order to better help you learn and understand network engineers, and other related content, I deliberately organize all the materials systematically, and share them here for free. Necessary materials for network workers, including:
Huawei certification mind map (super fine);
Huawei certification necessary knowledge documents (pdf);
collection of necessary knowledge documents for
network workers ; necessary tool kits for
network workers ; Prepare experiment package;
necessary video interview package for net workers.
……There is
a lot of information, I won’t list all of them, so I’ll write here first. If you have any questions, please leave a message and discuss private messages~