2.4 (AAA - Authentication, authorization, and accounting) Flashcards
What is AAA?
AAA refers to Authentication, Authorization and Accounting. It is a framework used to control and track access within a computer network. Common network protocols providing this functionality include TACACS+, RADIUS, and Diameter.
What is Identification in AAA?
Who you claim you are, usually with a username.
What is Authentication in AAA?
This is a method on the AAA framework wherein the credentials of the user are being challenged by asking, for example, their username and password, which is encrypted using a hashing algorithm that makes it harder for the hackers to intercept.
Usually to prove you are who you say you are, usually with a password or other factor.
What is Authorisation in AAA?
Once the credentials of the user are authenticated, the authorization process determines what that specific user is allowed to do and access within the premise of the network. Users are categorized to know what type of operations they are allowed to perform such as an Administrator or Guest. The user profiles are configured and controlled from the AAA server. This centralized approach eliminates the hassle of editing on a “per box” basis.
Based on your identification and authentication, what access are you are given.
What is Accounting in AAA?
The last process that is done in the AAA mechanism is an accounting of everything the user is doing within the network. AAA servers monitor the resources being used during the network access. Accounting also logs the session statistics and auditing usage information that is being used, usually for authorization control, billing invoice, resource utilization, trend analysis, and planning the data capacity of the business operations.
Your resources used: login time, data sent and received and logout time.
