ccna 200-301 study planner

ccna 200-301 study planner.Cisco 10S routers can be configured to use AAA to access a local username and password database. Using a local username and password database provides much greater security than using a simple password and is a cost-effective, easy-to-implement security solution. Cisco I0S routers can also be configured to access a Cisco Secure Access Control Server (ACS) using AAA. It is easy to scale with CiscoACS, because all infrastructure devices access a central server. Because multiple servers can be configured, Cisco Secure ACS solutions are also fault-tolerant. As a result, Cisco Secure ACS solutions are often implemented in large organizations.The hands-on experiment in this chapter, "Protecting Managed Access with AAA and RADIUS," allows participants to configure and test local authentication using the CLI and CCP, both with and without AAA. The experiment also discusses centralized authentication using AAA and RADIUS.A Packet Tracer exercise in this chapter, "Configuring AAA Authentication on a Cisco Router," provides participants with additional practice in implementing the techniques covered in this chapter. Participants will configure local authentication with and without AAA. Server-based AAA authentication is configured using TACACS+ and RADIUS.3.1 Purpose of Using AAA3.1.1 AAA Overview3.1.1.1 Authentication without AAANetwork intruders may gain access to sensitive network devices and services. Access control has no effect on who or what can use special60 Chapter 3 Authentication, Authorization, and Auditingspecific resources and, once access is granted, also restricts which services and options are available. Multiple authentication methods can be implemented on a single Cisco device.Each method provides a different level of security. The simplest form of authentication is the password. This method is configured on the console, VTY lines, and AUX ports using a combination of logins and passwords. This method is the easiest to implement, but it is also the weakest and least secure. The password-only login method is vulnerable to brute-force attacks. In addition, this method does not provide auditability, and anyone with a password can access the device and modify the configuration. To help provide auditability, local database authentication can be implemented using one of the following commands: username username password password username username secret password