What config AAA is better?

I have two configs

What config to flexibility and a point of view of security would be better?

Authethenticating with ACS for AD

connection of 2 AAA authentication attempts
AAA authentication login default group Ganymede + local activate
the AAA authentication enable default group Ganymede + activate
AAA authorization config-commands
AAA authorization exec default group Ganymede + authenticated if
default 15 AAA authorization commands group Ganymede + none
AAA accounting system default start-stop Ganymede group.
!

or

AAA authentication login default group Ganymede + local
AAA accounting exec default start-stop Ganymede group.
orders accounting AAA 15 by default start-stop Ganymede group.
AAA accounting network default start-stop Ganymede group.
Default connection accounting AAA power Ganymede group.
AAA accounting system default start-stop Ganymede group.

The first configis no doubt the safest because it includes authorization.

With permission, you can configure the ACS to send for example of privilege levels, or to run a command authorization, and the user can have a different set of commands allowed according to o NTHE group that he belongs to advertising, for example.

HTH,

Tiago

--

If this answers your question please mark the question as "answered" and write it down, so other users can easily find it.

Tags: Cisco Security

Similar Questions

  • What is the current beta?

    I'm running Beta version 13.0, I get an update to Beta version 16.4. When I select to download all I get is a window that says connection to update the server. I have left in the past 24 hours and receive nothing. What is the current beta? Is this a bug? is this a virus?

    The current beta version is 16 Firefox beta 4

  • What graphics card work better with digital painting, Nvidia GTX970 or Table K2200?

    What graphics card work better with digital painting, Nvidia GTX970 or Table K2200?
    I know it's much better to have a framework, if you work with 3D, but the framework is also better than the Nvidia card if I want to work only with digital painting?

    Designer Roberto Blake offers some good advice on the graphics cards and Photoshop here.

    http://robertoblake.com/blog/2014/01/best-video-graphics-card-Photoshop/

    and a link to the landmarks of PassMark Software - graphics (GPU) video card Benchmark

  • What persistence tool is better for the purposes of consistency?

    What persistence tool is better for the purposes of consistency? TopLink and Hibernate?

    What are the advantage and disadvantage of using?

    Thank you

    TopLink Essentials, as a product of JBoss Hibernate is a framework of persistence object / relational open-source or layer is used in Java applications. While both products strives to offer a non-intrusive, highly flexible and powerful solution there are a of the key differences.

    * TopLink Essentials, derived from Oracle TopLink has been in production Java applications scale for large scale deployments and transaction volumes for more than a decade. This reliability in conjunction with a set of features has evolved through close partnerships with customers led to it a excellent performance and scaling of the solution of persistence as offering rich flexibility to configure mappings and customize the runtime behavior in support of a wide variety of database and application deployments. Customers with a certain degree of complexity in the domain model or the relationship patterns, especially where change the schema is not an option, will benefit from the flexibility and the character experienced TopLink.
    * TopLink caching solution is based on caching the entity mapped instead of breaking down the data in raw art works. This storage in the format required by the application provides huge benefits in most usage scenarios. In addition, the TopLink cache is very flexible in its configuration and its control by entity type.
    TopLink society is open to a friendly match with the forums without restrictions served by experienced and personal management development who has been with the product throughout its existence. Offers support services and Oracle TopLink to backup are qualified and offer global coverage.
    As the the TopLink JPA reference implementation provides the first implementation certified to this new standard. In addition to providing some useful value-added functionality. Moving forward this project open source will continue to innovate on the basis of contributions from Oracle, Sun and others.
    Help of TopLink Essentials will provide you with a rich ORM solution based on JPA standard. It will allow you also to seamlessly switch to offering of Oracle TopLink and benefit from many advanced ORM features.

  • What MacBook Pro is better for my situation?

    Hello, guys.

    Could you please help me decide which MacBook Pro is the best for my situation?

    Currently, I chose between these models:

    • MacBook Pro 15 "2.2 GHz / RAM 16 / 256 GB of storage / Iris Pro
    • MacBook Pro 15 "(2.8) of 2.5 GHz / RAM 16 / 256 GB of storage / Iris Pro"
    • MacBook Pro 15 "2.5 GHz / RAM 16 / 512 GB of storage / AMD Radeon R9 M370X (2 GB)

    I'll use the laptop for:

    • Webdesign. I work in Photoshop all day and it was sometimes messy (major projects, many of those open simultaneously, etc..). Theoretically, I would like for my laptop to be able to handle perfectly Photoshop, Illustrator and inDesign workflow, maybe even at the same time. Of course, all will be loaded up for the most part, but it should be imperceptible to work on projects of large size in Photoshop runs alone.
    • Audio engineering. Recording/mixing/mastering audio as a hobby, which may require use of the processor 4 do. My current laptop (2.3 GHz Dual Core Intel i5 - 2410 M) cannot manage even the basics of what I need for comfort work with audio. Usually it is around 10-15 tracks, stock and third-party plugins sometimes. I omit the part that the new laptop should have completely no problems with recording audio through audio interface (no cracks, dents, noises and other things caused by lack of CPU and RAM). I guess that each of these three Mac is capable of a fluent audio recording, the question arises on the comfortable audio processing in the future.
    • Navigation. I know that sounds ridiculous, but there are times that my laptop current can't live through an intense session of navigation. About 20-25 tabs with mixed content (text for most, a couple of video opened online). I use Google Chrome, which is quite noticeable on the CPU, but it's my personal preference in terms of browser.
    • Web development. I would like to be able to make everything about web development fast and easy. That shouldn't be the problem, since even my laptop current meets my needs developing. Just let it be worth mentioning.

    Given the above information, I can make a conclusion that I need:

    • Retina display, press each tiny pixel on the screen of work related to graphic design
    • Reasonably fast CPU and RAM

    Initially, the more powerful MacBook Pro (with default 2.5 GHz and AMD video card) seemed like a logical option. However, after reading about the AMD video card I noticed that it is still lower than the average of those on the market (judging on the benchmark). Therefore, it seems that there is no reason to pay more for just a video card, comparing to the stack by default a cheaper model (the 15 "MacBook Pro 2.2 GHz/256 GB of storage). 0.3 GHz of processor is imperceptible, and the lack of hard disk space may be justified by external USB storage or by configuring the cheaper model for more storage by itself. The main difference is the video card. Please, correct me if I'm wrong on this conclusions.

    Therefore, I came to decide what configuration is best with regard to the less expensive version of the MacBook Pro 15 ", the 2.2 GHz (default) or 2.5/2.8 GHz (configured). Consider the following:

    • I'm dependent on a budget; slice of 100 dollars, in fact, issue
    • My priority is a seamless workflow without any freeze for 5 minutes and loading/closing time take up to 10 minutes, as it does now
    • It is not important if a graphic/audio project takes longer to make, but it is important to work freely during production
    • I don't mind having an external USB storage, as long as he has a decent read/write speed (external USB flash are available for Macs, right?)
    • Design or audio are not my original recipes, rather a freelance opportunities or leisure

    I'd be really grateful if you could answer some of these questions and help me decide:

    • If I had to choose between 2.2 GHz to 2.8 GHz boost or 256 GB of storage on 512 GB, which is more reasonable storage boost?
    • Is there a really significant difference in the performance of the tasks that have been mentioned between 2.2 GHz and 2.5 GHz/2.8 GHz?
    • No AMD video card makes a huge difference in terms of working with graphics? (Of course, he does, but it would be nice to take a look at the difference in the form of a chart or a reference; if it is not dramatic, then pay more for the video card makes no sense for me)
    • Then Iris Pro (which comes with 2.2 GHz cheaper option) handle some minor games like World of Warcraft or Diablo 3? Not necessary on ultra or high settings, but on those that make the game playable and enjoyable. (Is not necessary, but it would have been a considerable advantage, because even though I'm not a hardcore gamer, it's nice to play some old games favorite from time to time)

    Thanks for your opinions and suggestions!

    If you select I would recommend 512 GB drive. Media projects can become very large, and I suspect that you also like to have pictures of the reserve, textures, etc available all the time. I'm not a professional graphic designer, but I create brochures and documents as well as videos of 15-20 minutes and on a 256 GB drive I will decide on a project, move everything turned off, and then start a new project. Sometimes, when I had several projects going at the same time I had to decide which awkward solution was the best.

    Video Intel Iris Pro is better than I expected and I can play Diablo 3 on my MBP to 2015 on higher than smaller settings. I always use CS 5.5 because I refuse to rent my graphics software, so I don't know the State of the current Adobe software but I know that some users are griping on the 3D graphics and lower end GPU processors. I suggest you check out the Adobe forums.

  • HP pavilion p6777c: what upgrades would work better with my system

    I have a Hp Pavilion p6777c and I love the update for my children and a woman who plays world of warships, world of tanks and of second life what hardware upgrades can I do and stay within my budget of less than 400 dollars?

    Indy76, welcome to the forum.

    The processor is good.  I do not recommend change.  You can add more memory.  This is recommended by Crucial memory memory .  In addition, if you want to increase the speed, a new SSD better.  The essential link, he recommends SSD.  The MX200, 250 GB, SSD for $99 would be very good.  There is a guide for upgrading to a 2.5 "SSD in to the lower left corner of the page.  You would need an adapter to install a 2.5 SSD "in a 3.5 drive Bay".  If Crucial recommends they guarantee that it will work.

    If you upgrade the video card, you will also need to upgrade the power supply (PSU).  The most recent video cards require UEFI in the motherboard instead of a standard BIOS.  HP didn't start using UEFI until mid-October 2012.  The last series of video cards that does not need UEFI was the GT of the 640.  If you like the card, I recommend that you contact EVGA Tech Support (1-800-880-3842) in order to ensure that it will work on your computer.

    I love Of the PSU from Corsair.  I recommend at least 500W.  It would give you some excess power for maximum use.  The one in the link is modular.  It allows you to use only the necessary cables for a better air circulation.

    Please click on the Thumbs up button '+' if I helped you and click on "Accept as Solution" If your problem is resolved.

  • What domain provider is better?

    Original Titlr: wich domin provider better

    Dear Sir

    Please give me detail wich domin provider is the best in the world

    Hello

    I'm not sure that you will get what someone here to stick their neck on the block for you. In my opinion there is no such thing as 'the best '. Some may be more appropriate than others depending on the needs of the client and/or budget.

    My advice is to do your own research via your favorite search engine and make a decision according to your particular circumstances.

    Tricky

  • What scripting language is better to create games, AS2 or AS3?

    Just need to know the anser the question in the title for future reference.

    Thank you!

    AS3 by a landslide and CC4 when he made his debut. A better question would be what AS3 (3D) framework to write the game. In this case check out them here:

    http://www.Adobe.com/devnet/flashplayer/stage3d.html

  • What config preferences would lead the button in the addon to the no fire no?

    The context search X Addon does not work in my default profile, Firefox ver 34. Some of these buttons does not fire, but all the other addons and the links are clickable. Yet the addon works in a new profile I created to diagnose the problem. Deactivation of all the addons in the default has not solved the problem. The problem is perhaps not an addon, but among the preferences of config, but I don't know which. Preferences in particular could be the cause of this behavior?

    Separate the issue;
    Shows details of the system;

    Plug-ins installed

    Adobe Shockwave for Director Netscape plug-in, version 12.1.1.151
    Adobe Shockwave for Director Netscape plug-in, version 12.0.7.148

    Gmelius 5.7.6.1 ([email protected])
    Gmelius 5.7.7.12 ([email protected])

    Having multiple versions of a program can cause problems.

  • What is my Windows better switching from XP home?

    upgrade

    I have a Dell Dimension 2400 that runs on Windows XP Home Edition.  What is my best Windows Update?

    Start here: http://windows.microsoft.com/en-us/windows7/help/upgrading-from-windows-xp-to-windows-7

  • What is the best/better way to reenumerate USB ports from a script? I need to emulate the same enumeration that occurs when a USB device is either plugged or unglugged to a USB port.

    I'm working on a network to restrict access to the ISSO role USB mass storage, only. Management wants to access USB Mass Storage for ISSOs on all workstations while blocking access to USB mass storage to all others... on all the workstations. They also want to that USB ports remain available for everything except Mass Storage.

    There are many ways to do it, but the only 'reliable' method, I found so far is to point the HKLM\System\CurrentControlSet\Services\UBSSTOR\ImagePath key to some fake file to block ports and rename it back to access it again.

    To do this, I need to do things more two 2...

    1. make sure that the ImagePath key always has the false value at startup, and

    2. create a login script that affects the ImagePath value when a member of the ISSO group connects... and reset it when they log off.

    Which meet the requirements of the direction if only it worked! The problem is that USB devices must be listed again to re-read the ImagePath registry key after each change. Reconnect the device will do, but it would be unwise to rely on a user to restrict access (fox/Coop).

    The following Microsoft KB seems to be the way to go, but we do not have compilers on the network...

    http://support.Microsoft.com/kb/259695

    I know that this hack to the system is not the most elegant, but I'm just trying to make the management happy.

    Nobody knows...

    1. any (more elegant) way to meet the specified requirement, or

    2. a way to re - enumerate USB devices from a script.

    Thank you! ... Todd

    Hi Todd,

    The issue of Windows XP, you have posted is better suited for the IT Pro TechNet public. Please ask your question in the TechNet forums for assistance.

    Hope the helps of information.

  • What is the diff bet. helmet has a gold plated 3.5 mm taken and headphones with a normal socket?

    What is the difference between a pair of headphones has a gold plated 3.5 mm jack and a headphone output with a normal socket?

    Thank you

    SR

    Bling... and possibly a few milliOhms.

  • What ics firmware is better?

    Hey guys... I found so many links in the forums for ics update by a flashing... and so many different size of ics...
    I know wana that ics is best for xperia mini st15i?

    My IF none is 1248 - 9517.n I wana Flash my phone... pls post the best link ics firmware download and Ideal for my st15i...

    I found a link over which is ics global firmware st15i
    http://Android.slhosting.EU/Sony/

    is it better?

    All are the same, they differ in size, because they differ in the pre loaded applications

  • What screen size are better use?

    What size of the screen is the best to use. Looking at the design reagent in Captivate 8, the size of the screen are not much sense. I don't know if I'm misunderstanding or not. The size of the Tablet is 768 x 627, still an iPad 4 is 1024 x 768. The Samsung is also different. It is the same for the size of the phone. Am I missing something? I would like to use my phone in landscape mode.

    Thank you

    You can change the breaking points in the delicate design. It is not the actual resolution of devices which is important, but the resolution of the browser. In addition, there are the extra space as for the playback bar (45 pixels).

    To check the resolutions, this site may be useful: http://viewportsizes.com/

    You'll see that, for most smartphones, the resolution of the browser is much smaller then the actual resolution of the device. I have a HTC One, 1920 x 1080, but the resolution of the browser in Portrait mode has only a width of 360. landscape 640.

    There are so many devices around, you can choose those you are aiming for. It's a jungle, sorry. Not to mention the different browsers with each a different support of HTML5.

    Lilybiri

  • [consultation] What can I write better?

    Hi all!
    First of all, I don't know if I'm violating some rules of forum in question about it. If so, please do not hesitate to close or even delete my thread. :)

    I have a class where to collect my generic use of static methods to bring them a project to another when necessary.

    I want knowledge, some patients users :), is if there is something that I could develop better, faster, more optized... or even something that already exists in the standard Java/API in code (which could replace or do my methods more optimized)!

    My class is published here (is too big to be reported here under the labels 'code'): https://bitbucket.org/Patcha/putl/src/c4be9b6fd5c5/pUtl.java
    (Tell me if you follow this link and try to update at least twice, if some SSH problems appear. I'm not totally sure I did '+ public + enough "! : D).

    Thank you all, if you want to commit to me. :)

    PS: Of course you can use my class or methods if you need them too.
    Just not "selling" as your own if possible. : D

    Patcha wrote:
    Infact I thought they must have something similar to "+ join() +»

    I don't know how join() is, but it sounds similar to Collection.addAll ().

    unsorted research (not "+ binary +")

    You mean like Collection.contains (), (), () List.lastIndexOf List.indexOf?

    and maybe "+ reverse() +»

    You mean like the Collections.reverse () and two reverseOrder() methods?

    but I did not find it there.

    Looks like you didn't look very hard.

Maybe you are looking for