Chapter 10. AAA Configuration

Terms you'll need to understand:

• AAA

• Cisco Secure Access Control Server (CSACS)

• TACACS+

• RADIUS

• Downloadable access control lists

• Cut-through proxy

• Virtual Telnet

• Virtual HTTP

Techniques you'll need to master:

• Configuring AAA services on the PIX

• Using the group tag

• Authenticating with RADIUS and TACACS+

• Using the privilege command

• Using named and unnamed downloadable ACLs

This chapter covers the powerful triple A (AAA) features the PIX firewall supports. Authentication, authorization, and accounting provide powerful control over who can access the network or the PIX and the capability to record when it happens. The capability to have downloadable access control lists (ACLs) gives PIX administrators limitless flexibility and granular control over users by restricting what they can and cannot do.