Network Administrators Survival Guide

The topics covered in this chapter prepare the Netadmin for securing access to all the networking devices. The Netadmins should be able to perform the following tasks within the AAA framework:

  • Deploy a Linux-based TACACS+ Server to support Cisco devices

  • Deploy a Microsoft Windows 2000 Server-based RADIUS Server using an Active Directory database for authentication

  • Secure administrative access to Cisco IOS-based routers and switches using the TACACS+ and RADIUS protocols

  • Secure administrative access to CatOS-based Cisco switches using the TACACS+ and RADIUS protocols

  • Secure administrative access to Cisco PIX Firewalls using the TACACS+ and RADIUS protocols

  • Secure administrative access to Cisco VPN concentrators using the TACACS+ protocol

Table 3-18 summarizes all the tools, including the source of the installation files, that are discussed in this chapter.

Table 3-18. Tools Used in Chapter 3

Tool

Function

Supported OS

Installation Files

TACACS+ freeware

TACACS+-based authentication, authorization, and accounting

Linux and major UNIX flavors

ftp://anonymous@ftpeng.cisco.com/pub/tacacs/

FreeRADIUS

RADIUS-based authentication, authorization, and accounting

Linux, FreeBSD, OpenBSD, OSF/UNIX, Solaris

http://freeradius.org

Microsoft IAS

RADIUS-based authentication, authorization, and accounting

Windows 2000 Server, Windows 2003 Server

Included with the MS 2000/2003 Server software

Related

Категории