This week only got 1 post~~
About the AAA.
Then..next week Lab Test liao... T.T
Anywho....
Authentication, Authorization and Accounting (AAA)
- a framework for intelligently controlling access to computer resources, enforcing policies, auditing usage and providing the information necessary to bill for services.
- these combined processes are considered important and much needed for effective network management and security.
Authentication, the first process, provides a way of identifying a user, typically by having the user enter a valid user name and valid password before access is granted.
- This process is based on each user having a unique set of criteria for gaining access.
- The AAA server compares the credentials inputted with the credentials database.
- If there is a match somewhere, then that user is granted access to the network.
- If there is no match, then the user can't enter the network.
After Authentication is Authorization. All users needs to be given the authorization to perform certain tasks.
- This process determines whether the user has any authority to perform any tasks (eg. Issuing commands)
- Authorization is the process of enforcing policies, determining what types or qualities of activities, resources or services a user is permitted.
- Usually Authorization happens together with Authentication.
- The moment a user is authenticated into the network, he/she is granted the authorization for different types of access or activity.
Last but not least is Accounting. It measures the resources a year consumes during access, possibly including the amount of system time or amount of data a user has sent/received during a session.
- Its normally done by logging of system statistics and usage information.
- Used for authorization control, billing, trend analysis, resource utilization and capacity planning activities.
AAA services are often provided by a dedicated AAA server, a program that performs all these functions.
From this post, I was able to understand the AAA which is a framework for intelligently controlling access to computer resources, enforcing polices, auditing usage and providing the information necessary to bill for services. I now able to better understand what each of the ‘A’ stand for as well as the things that each ‘A’ does. The points are given in bullet points which I find easier to understand and makes it more readable as well. Overall, I find this post very good as the points are all interlinked to each other and have a logical flow to each other.
ReplyDelete-Amos
Great post you've got there. The information is there and it is easy to read. It is a lot similar to mine. However, mine is way more awesome! It is educational and I can learn from your blog. By reading your blog and mine, I'm sure I'll ace this subject. Nonetheless, great post there!
ReplyDeleteThis post allow me to understand more about Authentication, Authorization and Accounting as the information given is easy to understand and is not long winded. However, by including pictures would be a better improvement for your post as it allows an easier understanding for it.
ReplyDeleteBy reading this post, i have a clearer understanding of AAA especially the part "After Authentication is Authorization. All users needs to be given the authorization to perform certain tasks.
ReplyDelete- This process determines whether the user has any authority to perform any tasks (eg. Issuing commands)
- Authorization is the process of enforcing policies, determining what types or qualities of activities, resources or services a user is permitted.
- Usually Authorization happens together with Authentication.
- The moment a user is authenticated into the network, he/she is granted the authorization for different types of access or activity."
Cheers,
Yj
Good informative post but lacks pictures because it is rather boring with the black background. But good effort with the most and I have learned a few new things like AAA is a framework for intelligently controlling access to computer resources, enforcing polices, auditing usage and providing the information necessary to bill for services.
ReplyDelete