FAQs

Q1:Can RADIUS understand Cisco IOS authorization?
A1: No. RADIUS was developed by Livingston for multivendor use. It doesn't understand Cisco IOS and therefore can't understand different privilege levels for use with command authorization.
Q2:Can TACACS+ understand Cisco IOS authorization?
A2: Yes. TACACS+ is a Cisco product and was designed to understand Cisco IOS, including command authorization.
Q3:Why do I need accounting in AAA?
A3: Accounting is used to track user activity, create billing information, and protect against repudiation by providing a record of user activity.
Q4:What is the reason to assign privilege levels with AAA?
A4: Privilege levels are meant to authorize users at a certain privilege level to a limited set of commands ...

Get CCIE Practical Studies: Security (CCIE Self-Study) now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.