Configuring Authentication, Authorization, And Accounting Functions; Aaa Overview; Cisco Asr 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide - Cisco ASR 9000 Series Configuration Manual

Configuring Authentication, Authorization, and
Accounting Functions
This chapter provides information about configuring authentication, authorization, and accounting (AAA)
functions on the BNG router. BNG interacts with the RADIUS server to perform AAA functions. A group
of RADIUS servers form a server group that is assigned specific AAA tasks. A method list defined on a
server or server group lists methods by which authorization is performed. Some of the RADIUS features
include creating specific AAA attribute formats, load balancing of RADIUS servers, throttling of RADIUS
records, Change of Authorization (CoA). This chapter covers these topics:
•
•
•
•
•
•
•
•
•
•

AAA Overview

AAA acts as a framework for effective network management and security. It helps in managing network
resources, enforcing policies, auditing network usage, and providing bill-related information. BNG connects
to an external RADIUS server that provides the AAA functions.
The RADIUS server performs the three independent security functions (authentication, authorization, and
accounting) to secure networks against unauthorized access. The RADIUS server runs the Remote
Authentication Dial-In User Service (RADIUS) protocol. (For details about RADIUS protocol, refer to RFC
OL-26148-02
AAA Overview, page 9
Using RADIUS Server Group, page 11
Specifying Method List, page 13
Defining AAA Attributes, page 15
Making RADIUS Server Settings, page 25
Balancing Transaction Load on the RADIUS Server, page 32
Throttling of RADIUS Records, page 35
RADIUS Change of Authorization (CoA) Overview, page 39
Understanding Per-VRF AAA Function, page 40
Additional References, page 40
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
2
C H A P T E R
4.2.x
9