Configuring Authentication and
Accounting Services
This chapter describes how to configure the Cisco 4700 Series Application
Control Engine (ACE) appliance to perform user authentication and accounting
(AAA) services to provide a higher level of security for users accessing the ACE.
The AAA services allow you to use multiple AAA servers to control who can
access the ACE and to track the actions of each user who accesses the ACE. Based
on the username and password combination provided, the ACE performs local
user authentication using the local database or remote user authentication and
accounting using external AAA servers.
This chapter contains the following major sections:
•
•
•
•
•
•
•
•
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
OL-16202-01
AAA Overview
Authentication and Accounting Configuration Quick Start
Configuring the AAA Server
Creating User Accounts
Configuring the ACE as a Client of a RADIUS, TACACS+, or LDAP Server
Defining the Login Authentication Method
Defining the Default Accounting Method
Viewing AAA Status and Statistics
C H A P T E R
2
2-1