Authenticating Users

We specify how we are going to go about authenticating the individual users who are trying to connect. We have two general options. The first is that we could use an authentication, authorization, and accounting (AAA) server. Very likely, in a Cisco environment, this is an Access Control Server (ACS) (or Identity Services Engine [ISE]) server. The AAA server could be reached via RADIUS or TACACS+. In the case of authenticating users (end users, specifically SSL VPN users), if the ASA is using the AAA server, it will very likely use RADIUS because that is the recommended method for authentication. The other option is to use the local database, which just like on the router means the running configuration on the local device ...

Get Santos:CCNA Sec 210-260 OCG now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.