基于ACS的账号集中认证系统部署探析  

The Analysis of Account ‘s Centralized Authentication System Deployment Based on ACS

作　　者：张龙江[1] 王元杰[1] 李爱民[1] 

机构地区：[1]中国联合网络通信有限公司济南市分公司,250022

出　　处：《信息技术与信息化》2013年第3期103-106,共4页Information Technology and Informatization

摘　　要：本文针对城域网TELNET账号本地认证方式所存在的管理繁琐、配置和维护成本高、授权和审计功能弱等问题,探讨了基于ACS的集中账号认证系统的认证、授权原理和部署优势,通过集中账号认证方式与本地认证方式的对比分析,提出了部署ACS集中账号认证系统以减轻宽带城域网设备账号管理压力的思路,)以提高宽带网络的管理效率和安全性。The article describes the problems of MAN TELNET account’s local authentication,such as complex management 、high cost of configuration and maintenance、weak authorization and accounting.It has discussed account’s centralized authentication system’s authentication and authorization principle,and the deployment of advantage.Through analyzing the difference between the ACS centralized authentication and local authentication,it puts forward the thinking of deploying ACS system,and reduces the pressure of MAN TELNET account management,so it improves the efficiency of network management and network security.

关 键 词：SNMP协议 TELNET协议 TACACS RADIUS AAA 城域网 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]