Cisco ASA 5505 Configuration Manual page 699

Configuring AAA Rules for Network Access
This chapter describes how to enable AAA (pronounced "triple A") for network access.
For information about AAA for management access, see the
Administrators" section on page
This chapter includes the following sections:
•
•
•
•
•
AAA Performance
The adaptive security appliance uses "cut-through proxy" to significantly improve performance
compared to a traditional proxy server. The performance of a traditional proxy server suffers because it
analyzes every packet at the application layer of the OSI model. The adaptive security appliance
cut-through proxy challenges a user initially at the application layer and then authenticates against
standard AAA servers or the local database. After the adaptive security appliance authenticates the user,
it shifts the session flow, and all traffic flows directly and quickly between the source and destination
while maintaining session state information.
Configuring Authentication for Network Access
This section includes the following topics:
•
•
•
•
•
•
OL-20339-01
AAA Performance, page 33-1
Configuring Authentication for Network Access, page 33-1
Configuring Authorization for Network Access, page 33-9
Configuring Accounting for Network Access, page 33-15
Using MAC Addresses to Exempt Traffic from Authentication and Authorization, page 33-16
Information About Authentication, page 33-2
Configuring Network Access Authentication, page 33-4
Enabling the Redirection Method of Authentication for HTTP and HTTPS, page 33-5
Enabling Secure Authentication of Web Clients, page 33-5
Authenticating Directly with the Adaptive Security Appliance, page 33-6
Configuring the Authentication Proxy Limit, page 33-9
C H A P T E R
32-10.
Cisco ASA 5500 Series Configuration Guide using ASDM
33
"Configuring AAA for System
33-1