AAA Security & VPN Types
Newer devices are more likely to use what TCP ports by default for RADIUS services?
- 1813 - 1812
What function does IKE perform in the establishment of an IPsec VPN?
- IKE establishes secure two way management traffic communication - IKE establishes secure tunnels for end user data
Match the VPN terminogoly to the suitable descriptions. - Split-tunnel VPN - NAT-T - Always-on VPN - Hairpinning
- Split-tunnel VPN - Only traffic destined to the protected LAN or DMZ traverses the VPN - NAT-T - Inserts a fake header to ensure the data can reach its destination correctly - Always-on VPN - A full time VPN usually between two firewalls or two routers Traffic that enters and exits on the same interface
What command must be entered on a router in order to support RADIUS security services?
AAA new-model
What device in a AAA framework is the initial direct recipient of user credentials?
Authenticator
A client needs to telecommute from home to the office, and requires a VPN connection. Only work related traffic should traverse the tunnel, Internet traffic should not. Which technology would allow for this operation?
Split tunneling
What does the Accounting aspect of a AAA service refer to?
Tracking services used