Cisco Systems C819HG4GVK9, C819GUK9 manual Configuring Security Features, C H A P T E R

C H A P T E R 9

Configuring Security Features

This chapter provides an overview of authentication, authorization, and accounting (AAA), which is the primary Cisco framework for implementing selected security features that can be configured on the Cisco 819 Integrated Services Routers (ISRs).

This chapter contains the following sections:

•Authentication, Authorization, and Accounting, page 9-1

•Configuring AutoSecure, page 9-2

•Configuring Access Lists, page 9-2

•Configuring Cisco IOS Firewall, page 9-3

•Configuring Cisco IOS IPS, page 9-4

•URL Filtering, page 9-4

•Configuring VPN, page 9-4

Authentication, Authorization, and Accounting

AAAnetwork security services provide the primary framework through which you set up access control on your router. Authentication provides the method of identifying users, including login and password dialog, challenge and response, messaging support, and, depending on the security protocol you choose, encryption. Authorization provides the method for remote access control, including one-time authorization or authorization for each service, per-user account list and profile, user group support, and support of IP, Internetwork Packet Exchange (IPX), AppleTalk Remote Access (ARA), and Telnet. Accounting provides the method for collecting and sending security server information used for billing, auditing, and reporting, such as user identities, start and stop times, executed commands (such as PPP), number of packets, and number of bytes.

AAAuses protocols such as RADIUS, TACACS+, or Kerberos to administer its security functions. If your router is acting as a network access server, AAA is the means through which you establish communication between your network access server and your RADIUS, TACACS+, or Kerberos security server.

Cisco 819 Series Integrated Services Routers Software Configuration Guide

OL-23590-02 9-1