<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:48" />
    <title>Authentication and Authorization Process </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1560;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1072996"> </a><h1 class="pTitle">
Authentication and Authorization Process

</h1>
<a name="wp1072997"> </a><p class="pBody">
Authentication is the process of verifying the identity of the person managing the switch. This identity 
verification is based on the user ID and password combination provided by the person managing the 
switch. The Cisco MDS 9000 Family switches allow you to perform local authentication (using the 
lookup database) or remote authentication (using one or more RADIUS servers or TACACS+ servers).

</p>
<a name="wp1072998"> </a><p class="pBody">
Authorization provides access control. It is the process of assembling a set of attributes that describe 
what the user is authorized to perform. Based on the user ID and password combination, the user is 
authenticated and authorized to access the network as per the assigned role. You can configure 
parameters that can prevent unauthorized access by an user, provided the switches use the TACACS+ 
protocol.

</p>
<a name="wp1072999"> </a><p class="pBody">
AAA authorization is the process of assembling a set of attributes that describe what the user is 
authorized to perform. Authorization in the Cisco NX-OS software is provided by attributes that are 
downloaded from AAA servers. Remote security servers, such as RADIUS and TACACS+, authorize 
users for specific rights by associating attribute-value (AV) pairs, which define those rights with the 
appropriate user.

</p>
<a name="wp1073222"> </a><p class="pBodyAutonumNoRule">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> No more server groups left = no response from any server in all server groups.<br />
No more servers left = no response from any server within this server group.

</p>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
