Remember: The radius group can contain more than one server for redundancy/load balancing. Radius server configuration on Cisco IOS is performed in few steps:ĭefine the Radius server and the key server radius server radius-iseĭefine a Radius server group aaa group server radius radius-ise-group

If the username is found and the password is correct, the RADIUS server returns an Access-Accept response, including a list of attribute-value pairs that describe the parameters to be used for this session. Remember: In Radius, authentication and authorization are coupled together. These attributes are compared to the information contained in a database for a given user and the result is returned to AAA to determine the user‘s actual capabilities and restrictions.Īccounting enables you to track the services users are accessing as well as the amount of network resources they are consuming.Ī typical AAA server is Radius (Remote Authentication Dial-In User Service): it is an open protocol, distributed client/server system that provides Authentication, Authorization and Accounting ( AAA) management. Increased flexibility and control of access configuration.Īdditionally, AAA provides a modular way of performing the following services:Īuthentication is the way a user is identified prior to being allowed access to the network and network services.Īuthorization works by assembling a set of attributes that describe what the user is authorized to perform.Suppose you manage hundreds of Cisco devices how can you connect and secure it against unauthorized access? You can use local username, but it isn’t scalable and granular, or use an AAA Server.

Radius network mac address