Skip to content

Ops 301: Class 08

Jump to bottom
NicholasLoiacono edited this page Mar 21, 2023 · 1 revision

This topic matters as it relates to what I'm studying in this module because we are getting into various encryption areas (or encryption algorithms) and how they work with/within networks.

Computer Network | AAA (Authentication, Authorization and Accounting)

  • The three A's in computer networking are Authentication, Authorization, and Accounting. To explain these to a non-technical family member, let me use an analogy of visiting a friend's house. Authentication is like knocking on the door and saying who you are. Your friend needs to verify that it's really you before they let you in. Authorization is like your friend giving you permission to enter and access certain areas of their house, such as the living room but not the bedrooms. Lastly, Accounting is like your friend keeping track of what you do while you're in their house, such as how much food you eat or how many drinks you have. This helps your friend know what resources were used and who is responsible for any changes or damages.

  • If the ACS server fails to authenticate a user during AAA implementation, the administrator should check the server's logs to see why the authentication failed. There could be several reasons for the failure, such as incorrect credentials or network connectivity issues. Once the cause of the failure is identified, the administrator should troubleshoot and fix the issue. In the meantime, the user may not be able to access the network resources until the authentication issue is resolved.

  • In AAA implementation using an ACS server, the Network Access Server (NAS) acts as a middleman between the user and the ACS server. The NAS is responsible for receiving the user's authentication request and forwarding it to the ACS server for verification. Once the user is authenticated, the ACS server sends the authorization and accounting information back to the NAS, which then grants or denies access to the requested resources. Here's a diagram to illustrate this process:

USER -----> NAS ------> ACS SERVER This would be the authentication request.

USER <----- NAS <------- ACS SERVER This represents authorization and accounting.

In that diagram the user sends an authentication request to the NAS, then it is forwarded to the ACS Server for verification. Once the ACS Server verifies the user's credentials, it sends the authorization and accounting information back to the NAS, which would then make it's own decision on allowing or denying access to what is being requested.

RADIUS Concepts

  • RADIUS provides several benefits for authentication and authorization, such as centralized management, scalability, and security. With RADIUS, user credentials and access policies can be stored in a single, centralized server, making it easier to manage user access across multiple devices and applications. RADIUS also supports load balancing and redundancy, allowing for high availability and scalability. In terms of security, RADIUS uses strong encryption algorithms to protect user credentials and data during transmission, reducing the risk of unauthorized access and data breaches.

  • RADIUS is a protocol used for authentication, authorization, and accounting in computer networks. The acronym stands for "Remote Authentication Dial-In User Service." RADIUS is commonly used by Internet Service Providers (ISPs), businesses, and organizations to provide authentication and authorization for remote users accessing their networks.

RADIUS supports several encryption algorithms for securing user credentials and data during transmission. The algorithms are Message 5 (MD5), Secure Hash Algorithm 1 (SHA-1), Extensible Authentication Protocol-Message Digest 5 (EAP-MD5), and Transport Layer Security (TLS).

Definitions:
  • Message Digest 5 (MD5): a widely used hash function that generates a 128-bit hash value. MD5 is commonly used for digital signatures and data integrity checks.
  • Secure Hash Algorithm 1 (SHA-1): a hash function that generates a 160-bit hash value. SHA-1 is commonly used for digital signatures and data integrity checks.
  • Extensible Authentication Protocol-Message Digest 5 (EAP-MD5): a protocol that uses MD5 for authentication and supports mutual authentication between the client and server.
  • Transport Layer Security (TLS): a protocol that provides secure communication over the internet. RADIUS can use TLS to encrypt communication between the client and server.

Things I want to know more about are the various other kinds of encryption algorithms and how to utilize them.

References

Computer Network | AAA (Authentication, Authorization and Accounting) Geeks for geeks. Retrieved March 21, 2023 from AAA

RADIUS Concepts Free Radius. Retrieved March 21, 2023 from Radius

Clone this wiki locally