answer all 4 1

Authentication, Authorization, and Accounting

Must post first.

One of the more mysterious features of the Cisco IOS is the use of AAA. By default, IOS devices are using the “old model” of authentication, authorization, and accounting. This is to say that, in addition to their being a new model (or new way of doing AAA), there is a better and more robust method of AAA on Cisco devices. Your task for this post is to detail the advantages of using the AAA new model when compared to the old model. Answer questions such as, How do you configure the AAA new model? Why is it better? What features does it have that the old model doesn’t? Do you need a centralized server to make it work?

Post Requirements: Your posts must use at least two (2) sources of information (properly cited using the American Psychological Association (APA) citation guidelines) in addition to the “hypermedia” already provided to you as part of the course. Your post must consist of a minimum of 250 words and a maximum of 500 words. Technical accuracy, proper in-text citations, and depth of coverage all play a critical role in your overall score.

You must start a thread before you can read and reply to other threads

Convince Me Otherwise: RADIUS is a Superior Solution in a Cisco Network Compared to TACACS+

Must post first.

RADIUS and TACACS+ provide an enhanced set of functionality when it comes to controlling remote access to Cisco networking devices. One of the major challenges for many network engineers is being able to describe when and why you would use one instead of the other. Your task for this post is to convince me that using TACACS+ in your Cisco network is a better choice than using RADIUS. You should focus on comparing and contrasting the strengths and weaknesses of each protocol and vigorously support your position for TACACS+.

Post Requirements: Your post must use at least two (2) sources of information (properly cited using the American Psychological Association (APA) citation guidelines) in addition to the “hypermedia” already provided to you as part of the course. Your post must consist of a minimum of 250 words and a maximum of 500 words. Technical accuracy, proper inline citations, and depth of coverage all play a critical role in your score.

You must start a thread before you can read and reply to other threads

Access Control List Challenge #1

Must post first.

For this Discussion Forum topic there is no length or APA citation requirement, making this a great alternative for a 2nd topic! This topic has TWO (2) parts, so be sure to follow the instructions below closely! Also, note that to participate in this topic, you need to post your “challenge” as well as a “solution” to another learner’s “challenge” – and you must post your “challenge” before you can see any of the other “challenges” from other learners. Here are the TWO (2) parts to this topic:

PART #1: You will create a new post to this topic in which you pose your “challenge” that needs to be solved with an ACL. Your “challenge” can ask to permit or deny traffic, must have a solution, and must be based on the network diagram you see below. At a minimum, your “challenge” post must include the following details:

• Identify the source address you want to permit or deny
• Identify the destination address
• Assign an ACL number or a name to be used in the “solution” response by another learner

PART #2: Using what you have learned about ACLs so far in the course, reply to ONE (1) “challenge” from another learner with an answer that includes the following details:

• Create a “solution” ACL using the appropriate prompts and commands including:
  • On which device the ACL will be placed
  • The interface and direction of the ACL
• If you can create a different ACL that satisfies the requirements, a second “reply” may be made to the original post, but only if it’s differs from the first solution. Otherwise, only one posted solution per problem is required.

The topology for this activity can be seen below (*Note: All PCs/Servers will ALWAYS use the SECOND assignable IP address in their subnet and all router interfaces in each subnet use the LAST assignable IP address in the subnet):

Here’s an example of what is expected for this topic (which means that you cannot use this scenario for your “challenge”):

Learner A posts the following “challenge” statement:

Learner A: Using an standard ACL numbered 15, deny all traffic from PC1 getting to PC2 but allow all other traffic

Learner B, who finds this “challenge” under this topic would respond with:

R1(config)# access-list 15 deny host 172.22.34.66

R1(config)# access-list 15 permit any

R1(config)# int gi0/1

R1(config-if)# ip access-group 15 out

Your posts for this topic are graded based on technical accuracy. In other words, if your “challenge” is technically correct and your response to another learner’s challenge is technically correct, you get full credit.