SECUR Exam Cram™ 2 (Exam 642-501)

Implementing AAA Using External Servers

For a small organization, using the router's local database makes economic sense. However, when you have hundreds or thousands of users, that solution does not scale.

For scalability reasons, and also for centralized management, AAA often uses an external server and not the local router database. When AAA uses an external server and a user attempts to establish a connection to the properly configured router, the router issues a prompt for a username and password. However, when the user enters her username and password, the router sends a packet to the external AAA server with the user's identity credentials. It is the external AAA server that verifies whether the user passes or fails the identity check. ...