NETS1037

NETS1037-09 - AAA (Authentication, Authorization, Accounting)

Overview

This lesson re-examines access controls and logging with a focus on remote authentication, authorization, and accounting. Authentication and authorization are covered in detail. It is expected to be completed in week 13 of the course, with the quiz due before the start of the following class.

Learning Objectives

At the end of this lesson, students will be able to:

• evaluate and select from different authentication methods for remote access
• implement a RADIUS service to provide AAA service to network edge access devices
• verify proper user controls and logging for AAA-enabled access

These objectives are in support of Learning Outcomes 4 and 6 in the Course Outline.

To do List

• Read through the presentation slides
• Watch the recorded video of the presentation found in the general chat of the Microsoft Team for this course if you did not attend the class when it was presented
• Review the lesson materials linked below
• Perform the learning activities as described below
• Do the quiz found under Tests on Blackboard for this topic

Lesson Material

• Presentation in PDF format
• Recorded video of the presentation found in the general chat of the Microsoft Team for this course

Learning Activity

In this lab assignment, you will be installing a Linux-based RADIUS service, suitable for use as authenticator, authorization grantor, and accounting recorder for remote users. Follow the instructions in the Lab 9 - AAA.

Online Resources - documentation and examples for software used in this lab

• RADIUS server software
• The FreeRADIUS Technical Guide
• FreeRADIUS HowTos
• PAM with RADIUS Authentication Guide
• Cisco TACACS+ Configuration Guide
• OpenLDAP
• Mysql
• MariaDB
• [Setting up Cisco AAA using RADIUS tied to Active Directory auth using Windows Server 2012 R2](https://www.adamcouch.co.uk/cisco-aaa-with-radius-against-active-directory-2012/
• Stackexchange discussion of RADIUS and AD relationship/distinction)
• Webmin System Admin web app
• Cockpit System Admin web app

Graded Activity

When you are done this lab, you can check the rubric for this assignment on Blackboard to ensure you have completed everything that is marked and then submit your work to Blackboard as described in the lab instructions.

Quiz

The quiz is found on Blackboard under Assignments and Tests.

Test

There is no separate test for this topic. The quiz will count for your testing mark in this topic.

Summary

In this module, you have been introduced to SNMP and using SNMP as a data source for monitoring software. You should now be able to:

• evaluate and select from different authentication methods for remote access
• implement a RADIUS service to provide AAA service to network edge access devices
• verify proper user controls and logging for AAA-enabled access

Completing the quiz will provide you with a measure of your knowledge in these areas. For the next class you should have your private virtual network ready, as well as your log server and Windows desktop client.