ccna centre d'examen

ccna centre d'examen.280 Chapter 9 Implementing the Cisco Adaptive Security Appliance ( ASA )service, the ASA does not have to resend the request to the authorization server. Auditing tracks traffic passing through the ASA and enables administrators to record user behavior. Audit information includes the time the session started and ended, the user name, the number of bytes that session passed through the ASA, the services used, and the duration of each session.9.2.8.2 Local Databases and ServersThe CiscoASA can be configured to use a local user database and/or an external server for authentication. Local AAAs use a local database for authentication. This approach stores the user name and password locally in the ASA, and authentication of the user requiresto check the local database. Local AAA is ideal for small networks that do not require a dedicated AAA server. Note: Unlike ISR, ASA devices that do not use AAA do not support local authentication. Use the username name password password [privilege priv-level] command to create a local user account. To clear the user from the local database, use the clear config username [name] command. To view the accounts of all usersUse the showrunning-conf username command.Server-based AAA authentication provides better scalability than the local AAA authentication method. Server-based AAA authentication uses external database server resources through the RADIUS or TACACS+ protocol. Examples include Cisco Secure Access Control Server (ACS) for Windows Server, Cisco Secure ACS Solution Engine, or Cisco Secure ACS Expresso if there are multiple connected devices, server-based AAA is a more appropriate choice.To configure a RADIUS or TACACS+ server, use the following commands.aaa-server server-tag protocol protocol: Creates a RADIUS or TACACS+AAA server group.aaa-server server server-tag [(interface-name)] host {server-ip \name}[key]: Configures the AAA service