Explains how authentication, authorization, and accounting (AAA) services create a robust framework for managing user access an
AAA is part of the software base package and is available by default.
To configure authentication, authorization, and accounting (AAA) authentication at login, use the aaa authentication login command in global configuration mode.
A AAA service is a security framework that
- authenticates users or principals to verify their identities,
- authorizes permissions so authenticated users can perform specific tasks, and
- accounts for user and system activities by recording selected actions and sessions.
AAA (Authentication, Authorization, and Accounting) services are included by default in the software base package. Administrators can use the command set to configure user groups and task groups, ensuring that only authorized individuals have access and that all actions are tracked for regulatory or security purposes.
- Authentication commands verify the identity of users or principals.
- Authorization commands determine if authenticated users or principals are allowed to carry out specific actions.
- Accounting commands log sessions and create audit trails by recording certain user- or system-generated activities.
To configure AAA authentication at login, use the following command in global configuration mode:
aaa authentication login