Hack the Route Start free Open app Labs / Who Goes There
Road 11 of 11
Who Goes There
Proving who someone is: AAA, port login, central accounts, tickets, single sign-on, second factors and zero trust.
Start this roadAAA, 802.1X & LDAP
Logging in to routers, ports and servers centrally.
- 01 AAA with RADIUS: who logs in to the router, what they may do, and a log of it Router AAA: RADIUS decides who logs in, what they may run, and records it. Pro
- 02 802.1X and RADIUS: logging in to a switch port Unlock a switch port by logging in with 802.1X against RADIUS. Pro
- 03 LDAP: one directory for every login Use one LDAP login on every server, and remove it in one place. Pro
Kerberos, SSO, MFA & zero trust
Tickets, single sign-on, second factors and zero trust.
- 01 Kerberos: one login, tickets for everything Get a Kerberos ticket once, then log in to services with no password. Pro
- 02 Two-factor SSH with a one-time code Add SSH 2FA: a one-time code as well as the password for every login. Pro
- 03 Single sign-on: one login, many services Sign in once with OpenID Connect and SAML, and see how the portal trusts it. Pro
- 04 Zero trust with mutual TLS Let only devices with a valid client certificate reach each service. Pro