Instruction/ maintenance manual of the product OL-9971-01 Cisco Systems
Go to page of 30
CHAPTER 3-1 User Guide for Cisco Secure Access Control Server OL-9971-01 3 Network Configuration This chapter details concepts and procedures for conf iguring the Cisco Secure Access Control Server Release 4.
3-2 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration About ACS in Distributed Systems • Remote Agents (A CS Solution Engine)—This table lists each remote agent that is conf igured together with its IP address and av ailable services.
3-3 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems These types of access control hav e unique authentication and authorization requirements.
3-4 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems An Example This section presents a scenario of proxy that is used in an enterprise system. Mary is an employee with an of f ice in the corporate headquarters in Los Angeles.
3-5 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems continues, in order , down the list, until the AAA servers handles the authentication request. (F ailed connections are detected by failure of the nominated server to respond within a specif ied time period.
3-6 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • Sending the accounting information to the remote AAA server also enables you to use the Max Sessions feature. The Max Sessions feature uses the Start and Stop records in the accounting packet.
3-7 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • T ype —The device type, as specif ied by the AAA protocol that it is conf igured to use, or the kind of AAA server it is. Y ou can also search for Solution Engine remote agents.
3-8 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 6 If you want to do wnload a f ile containing the search results in a comma-separated value format, click Download , and use your bro wser to save the f ile to a location and f ilename of your choice.
3-9 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – Number —Y ou can specify a number, for e xample, 10.3.157.98. – Numeric Range —Y ou can specify the low and high numbers of the range in the octet, separated by a hyphen (-), for example, 10.
3-10 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients The Authenticate Using list always contains: – T A CA CS+ (Cisco IOS) —The Cisco IOS T A CACS+ protocol, which is the standard choice when using Cisco Systems access servers, routers, and f irewalls.
3-11 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – RADIUS (Nortel) —RADIUS using Nortel RADIUS VSAs. Select this option if the network de vice is a Nortel network de vice that supports authentication via RADIUS.
3-12 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients T o add AAA clients: Step 1 In the navigation bar , click Network Conf iguration .
3-13 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA client is assigned. Then, click the name of the AAA client.
3-14 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Deleting AAA Clients T o delete AAA clients: Step 1 In the navigation bar , click Network Conf iguration . The Network Conf iguration page opens.
3-15 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Deleting AAA Servers, page 3-18 AAA Server Configuration Options AAA server conf igurations enable ACS to interact with the AAA serv er that the conf iguration represents.
3-16 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Log Update/W atchdog Pack ets from this remote AAA Serv er —Enables logging of update or watchdog packets from AAA clients that are forw arded by the remote AAA server to this A CS.
3-17 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA server is to be assigned. Then, click Add Entry belo w the [name] AAA Servers table.
3-18 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Step 3 Enter or change AAA server settings, as needed. F or information about the conf iguration options av ailable for the AAA server , see AAA Server Conf iguration Options, page 3-15 .
3-19 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) This section contains the following topics: • A.
3-20 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Note If the port number that you provide does not match the port the remote agent that you conf igured for listening, A CS cannot communicate with the remote agent.
3-21 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) The Add Remote Agent page appears. Step 3 In the Remote Agent Name box, type a name for the remote agent (up to 32 characters).
3-22 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) T o edit a remote agent conf iguration: Step 1 In the navigation bar , click Network Conf iguration .
3-23 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 Perform one of the following steps, based on your use of NDGs: a. If you are using NDGs, click the name of the NDG to which the remote agent belongs.
3-24 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Adding a Network Device Group Y ou can assign users or groups of users to NDGs.
3-25 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Note Y ou must enable the Ke y Wrap feature in the N AP Authentication Settings page to implement these shared keys in EAP-TLS authentication.
3-26 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 In the Network De vice Groups table, click the name of the current group of the network device.
3-27 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Deleting a Network Device Group When you delete an NDG, all AAA clients and AAA servers that belong to the deleted group appear in the Not Assigned AAA Clients or Not Assigned AAA Servers table.
3-28 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables About the Proxy Distribution Table If you enabled the Distributed Systems Settings, when you click Netw ork Conf iguration, you will see the Proxy Distribution T able.
3-29 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 5 From the Strip list, select Ye s to strip the character string from the username that you entered, or select No to leav e it.
3-30 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 3 Select the character string entry to reorder , and then click Up or Down to mov e its position to ref lect the search order that you want.
An important point after buying a device Cisco Systems OL-9971-01 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Cisco Systems OL-9971-01 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Cisco Systems OL-9971-01 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Cisco Systems OL-9971-01 you will learn all the available features of the product, as well as information on its operation. The information that you get Cisco Systems OL-9971-01 will certainly help you make a decision on the purchase.
If you already are a holder of Cisco Systems OL-9971-01, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Cisco Systems OL-9971-01.
However, one of the most important roles played by the user manual is to help in solving problems with Cisco Systems OL-9971-01. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Cisco Systems OL-9971-01 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
