Summary

The topics covered in this chapter prepare the Netadmin for securing access to all the networking devices. The Netadmins should be able to perform the following tasks within the AAA framework:

• Deploy a Linux-based TACACS+ Server to support Cisco devices

• Deploy a Microsoft Windows 2000 Server-based RADIUS Server using an Active Directory database for authentication

• Secure administrative access to Cisco IOS-based routers and switches using the TACACS+ and RADIUS protocols

• Secure administrative access to CatOS-based Cisco switches using the TACACS+ and RADIUS protocols

• Secure administrative access to Cisco PIX Firewalls using the TACACS+ and RADIUS protocols

• Secure administrative access to Cisco VPN concentrators using the TACACS+ protocol

Table 3-18 summarizes all the tools, including the source of the installation files, that are discussed in this chapter.

Table 3-18. Tools Used in Chapter 3

Tool	Function	Supported OS	Installation Files
TACACS+ freeware	TACACS+-based authentication, authorization, and accounting	Linux and major UNIX flavors	ftp://[e-mail]/pub/tacacs/
FreeRADIUS	RADIUS-based authentication, authorization, and accounting	Linux, FreeBSD, OpenBSD, OSF/UNIX, Solaris	http://freeradius.org
Microsoft IAS	RADIUS-based authentication, authorization, and accounting	Windows 2000 Server, Windows 2003 Server	Included with the MS 2000/2003 Server software