Cisco 3.3 Bedienungsanleitung

Stöbern Sie online oder laden Sie Bedienungsanleitung nach Computers Cisco 3.3 herunter. Cisco 3.3 User Manual Benutzerhandbuch

  • Herunterladen
  • Zu meinen Handbüchern hinzufügen
  • Drucken
  • Seite
    / 860
  • Inhaltsverzeichnis
  • FEHLERBEHEBUNG
  • LESEZEICHEN
  • Bewertet. / 5. Basierend auf Kundenbewertungen
Seitenansicht 0
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
User Guide for Cisco Secure ACS for
Windows Server
Version 3.3
May 2004
Customer Order Number: DOC-7816592=
Text Part Number: 78-16592-01
Seitenansicht 0
1 2 3 4 5 6 ... 859 860

Inhaltsverzeichnis

Seite 1 - Windows Server

Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAhttp://www.cisco.comTel: 408 526-4000800 553-NETS (6387)Fax:

Seite 2

ContentsxUser Guide for Cisco Secure ACS for Windows Server78-16592-01Configuring BBSM RADIUS Settings for a User Group 6-51Configuring Custom RADIUS

Seite 3 - CONTENTS

Chapter 3 Interface ConfigurationInterface Design Concepts3-2User Guide for Cisco Secure ACS for Windows Server78-16592-01• Protocol Configurati

Seite 4

3-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 3 Interface ConfigurationUser Data Configuration OptionsUser Data Config

Seite 5

Chapter 3 Interface ConfigurationAdvanced Options3-4User Guide for Cisco Secure ACS for Windows Server78-16592-01Restarting Cisco Secure ACS-rel

Seite 6 - 4 Network Configuration 4-1

3-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 3 Interface ConfigurationAdvanced Options• User-Level Network Access Res

Seite 7

Chapter 3 Interface ConfigurationAdvanced Options3-6User Guide for Cisco Secure ACS for Windows Server78-16592-01• RDBMS Synchronization—When se

Seite 8 - 6 User Group Management 6-1

3-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 3 Interface ConfigurationProtocol Configuration Options for TACACS+advan

Seite 9

Chapter 3 Interface ConfigurationProtocol Configuration Options for TACACS+3-8User Guide for Cisco Secure ACS for Windows Server78-16592-01Note

Seite 10 - 7 User Management 7-1

3-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 3 Interface ConfigurationProtocol Configuration Options for TACACS+–Disp

Seite 11 - Contents

Chapter 3 Interface ConfigurationProtocol Configuration Options for TACACS+3-10User Guide for Cisco Secure ACS for Windows Server78-16592-01To c

Seite 12

3-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 3 Interface ConfigurationProtocol Configuration Options for RADIUSThe s

Seite 13

xiUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsConfiguring Device-Management Command Authorization for a User7-30Configuring

Seite 14

Chapter 3 Interface ConfigurationProtocol Configuration Options for RADIUS3-12User Guide for Cisco Secure ACS for Windows Server78-16592-01Table

Seite 15

3-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 3 Interface ConfigurationProtocol Configuration Options for RADIUSTip Y

Seite 16 - 11 Logs and Reports 11-1

Chapter 3 Interface ConfigurationProtocol Configuration Options for RADIUS3-14User Guide for Cisco Secure ACS for Windows Server78-16592-01selec

Seite 17

3-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 3 Interface ConfigurationProtocol Configuration Options for RADIUSSessi

Seite 18 - 13 User Databases 13-1

Chapter 3 Interface ConfigurationProtocol Configuration Options for RADIUS3-16User Guide for Cisco Secure ACS for Windows Server78-16592-01appea

Seite 19

3-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 3 Interface ConfigurationProtocol Configuration Options for RADIUSStep

Seite 20

Chapter 3 Interface ConfigurationProtocol Configuration Options for RADIUS3-18User Guide for Cisco Secure ACS for Windows Server78-16592-01Step

Seite 21 - 15 Unknown User Policy 15-1

CHAPTER 4-1User Guide for Cisco Secure ACS for Windows Server78-16592-014Network ConfigurationThis chapter details concepts and procedures for configu

Seite 22

Chapter 4 Network ConfigurationAbout Distributed Systems4-2User Guide for Cisco Secure ACS for Windows Server78-16592-01If you are using network

Seite 23 - C RADIUS Attributes C-1

4-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationAbout Distributed Systems• CiscoSecure database r

Seite 24 - D CSUtil Database Utility D-1

ContentsxiiUser Guide for Cisco Secure ACS for Windows Server78-16592-01CHAPTER 8 System Configuration: Basic 8-1Service Control 8-1Determining the S

Seite 25

Chapter 4 Network ConfigurationProxy in Distributed Systems4-4User Guide for Cisco Secure ACS for Windows Server78-16592-01with one another. Eac

Seite 26 - G Internal Architecture G-1

4-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationProxy in Distributed SystemsNote When a Cisco Sec

Seite 27

Chapter 4 Network ConfigurationProxy in Distributed Systems4-6User Guide for Cisco Secure ACS for Windows Server78-16592-01continues, in order,

Seite 28

4-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationProxy in Distributed SystemsBecause Mary works in

Seite 29 - Organization

Chapter 4 Network ConfigurationNetwork Device Searches4-8User Guide for Cisco Secure ACS for Windows Server78-16592-01You can also choose to hav

Seite 30

4-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationNetwork Device Searchesor “m*”. Name-based search

Seite 31 - Conventions

Chapter 4 Network ConfigurationNetwork Device Searches4-10User Guide for Cisco Secure ACS for Windows Server78-16592-01Tip When you leave the Se

Seite 32 - Product Documentation

4-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationAAA Client ConfigurationStep 6 If you want to do

Seite 33 - Related Documentation

Chapter 4 Network ConfigurationAAA Client Configuration4-12User Guide for Cisco Secure ACS for Windows Server78-16592-01recommend that you adopt

Seite 34 - Table 2 Related Documentation

4-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationAAA Client ConfigurationFor correct operation, t

Seite 35 - Obtaining Documentation

xiiiUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsEvent Logging 8-20Setting Up Event Logging 8-20VoIP Accounting Configuration

Seite 36 - Documentation Feedback

Chapter 4 Network ConfigurationAAA Client Configuration4-14User Guide for Cisco Secure ACS for Windows Server78-16592-01When an authentication r

Seite 37 - Submitting a Service Request

4-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationAAA Client Configurationattributes. If the AAA c

Seite 38

Chapter 4 Network ConfigurationAAA Client Configuration4-16User Guide for Cisco Secure ACS for Windows Server78-16592-01• Replace RADIUS Port in

Seite 39

4-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationAAA Client ConfigurationStep 2 Do one of the fol

Seite 40

Chapter 4 Network ConfigurationAAA Client Configuration4-18User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 7 From the Authenti

Seite 41 - Overview

4-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationAAA Client ConfigurationTip If you want to save

Seite 42 - The Cisco Secure ACS Paradigm

Chapter 4 Network ConfigurationAAA Client Configuration4-20User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 2 Do one of the fol

Seite 43 - Chapter 1 Overview

4-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationAAA Server ConfigurationDeleting a AAA ClientTo

Seite 44

Chapter 4 Network ConfigurationAAA Server Configuration4-22User Guide for Cisco Secure ACS for Windows Server78-16592-01To configure distributed

Seite 45

4-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationAAA Server ConfigurationNote After you submit th

Seite 46 - • Administration, page 1-23

ContentsxivUser Guide for Cisco Secure ACS for Windows Server78-16592-01RDBMS Synchronization Components 9-29About CSDBSync 9-29About the accountActi

Seite 47

Chapter 4 Network ConfigurationAAA Server Configuration4-24User Guide for Cisco Secure ACS for Windows Server78-16592-01–Cisco Secure ACS—Select

Seite 48 - Authentication

4-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationAAA Server ConfigurationTo add and configure a A

Seite 49 - Authentication Considerations

Chapter 4 Network ConfigurationAAA Server Configuration4-26User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 9 From the Traffic

Seite 50

4-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationAAA Server ConfigurationTo edit a AAA server, fo

Seite 51 - Passwords

Chapter 4 Network ConfigurationNetwork Device Group Configuration4-28User Guide for Cisco Secure ACS for Windows Server78-16592-01Deleting a AAA

Seite 52 - Comparing PAP, CHAP, and ARAP

4-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationNetwork Device Group ConfigurationCisco Secure A

Seite 53 - EAP Support

Chapter 4 Network ConfigurationNetwork Device Group Configuration4-30User Guide for Cisco Secure ACS for Windows Server78-16592-01Tip If the Net

Seite 54 - Basic Password Configurations

4-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationNetwork Device Group ConfigurationTip If the Net

Seite 55 - Password Aging

Chapter 4 Network ConfigurationNetwork Device Group Configuration4-32User Guide for Cisco Secure ACS for Windows Server78-16592-01Renaming a Net

Seite 56 - User-Changeable Passwords

4-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationNetwork Device Group ConfigurationTip It may be

Seite 57 - Authorization

xvUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsEAP-TLS Authentication 10-2About the EAP-TLS Protocol 10-3EAP-TLS and Cisco Se

Seite 58 - Dynamic Usage Quotas

Chapter 4 Network ConfigurationProxy Distribution Table Configuration4-34User Guide for Cisco Secure ACS for Windows Server78-16592-01Proxy Dist

Seite 59

4-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationProxy Distribution Table Configurationcharacter

Seite 60

Chapter 4 Network ConfigurationProxy Distribution Table Configuration4-36User Guide for Cisco Secure ACS for Windows Server78-16592-01Tip You ca

Seite 61

4-37User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 4 Network ConfigurationProxy Distribution Table ConfigurationStep 1 In

Seite 62 - Accounting

Chapter 4 Network ConfigurationProxy Distribution Table Configuration4-38User Guide for Cisco Secure ACS for Windows Server78-16592-01Deleting a

Seite 63 - Administration

CHAPTER 5-1User Guide for Cisco Secure ACS for Windows Server78-16592-015Shared Profile ComponentsThis chapter addresses the Cisco Secure ACS for Wind

Seite 64 - Network Device Groups

Chapter 5 Shared Profile ComponentsNetwork Access Filters5-2User Guide for Cisco Secure ACS for Windows Server78-16592-01named shared profile co

Seite 65

5-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsNetwork Access Filters• NAFs in shared networ

Seite 66 - HTML Interface Security

Chapter 5 Shared Profile ComponentsNetwork Access Filters5-4User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 3 Click Add.The Ne

Seite 67 - HTML Interface Layout

5-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsNetwork Access FiltersTip You can also remove

Seite 68

ContentsxviUser Guide for Cisco Secure ACS for Windows Server78-16592-01Generating a Certificate Signing Request 10-45Using Self-Signed Certificates

Seite 69

Chapter 5 Shared Profile ComponentsNetwork Access Filters5-6User Guide for Cisco Secure ACS for Windows Server78-16592-01Caution If you change t

Seite 70

5-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsDownloadable IP ACLsNote Restarting the servi

Seite 71

Chapter 5 Shared Profile ComponentsDownloadable IP ACLs5-8User Guide for Cisco Secure ACS for Windows Server78-16592-01This section contains the

Seite 72 - Accessing the HTML Interface

5-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsDownloadable IP ACLsACL to each applicable us

Seite 73

Chapter 5 Shared Profile ComponentsDownloadable IP ACLs5-10User Guide for Cisco Secure ACS for Windows Server78-16592-01Examples of Cisco device

Seite 74 - Using Online Help

5-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsDownloadable IP ACLsTo add a downloadable IP

Seite 75

Chapter 5 Shared Profile ComponentsDownloadable IP ACLs5-12User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 9 To save the ACL c

Seite 76

5-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsDownloadable IP ACLsEditing a Downloadable I

Seite 77 - Deployment Considerations

Chapter 5 Shared Profile ComponentsNetwork Access Restrictions5-14User Guide for Cisco Secure ACS for Windows Server78-16592-01Cisco Secure ACS

Seite 78 - System Requirements

5-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsNetwork Access RestrictionsThis section cont

Seite 79

xviiUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsConfiguring an ODBC Log 11-23Remote Logging 11-26About Remote Logging 11-26I

Seite 80 - Network and Port Requirements

Chapter 5 Shared Profile ComponentsNetwork Access Restrictions5-16User Guide for Cisco Secure ACS for Windows Server78-16592-01the client. For t

Seite 81

5-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsNetwork Access RestrictionsAbout IP-based NA

Seite 82 - Network Topology

Chapter 5 Shared Profile ComponentsNetwork Access Restrictions5-18User Guide for Cisco Secure ACS for Windows Server78-16592-01About Non-IP-base

Seite 83

5-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsNetwork Access Restrictions• If you are usin

Seite 84

Chapter 5 Shared Profile ComponentsNetwork Access Restrictions5-20User Guide for Cisco Secure ACS for Windows Server78-16592-01To add a shared N

Seite 85 - Wireless Network

5-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsNetwork Access RestrictionsNote The total nu

Seite 86 - Cisco Aironet AP

Chapter 5 Shared Profile ComponentsNetwork Access Restrictions5-22User Guide for Cisco Secure ACS for Windows Server78-16592-01d. To specify the

Seite 87

5-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsNetwork Access RestrictionsEditing a Shared

Seite 88 - Remote Access using VPN

Chapter 5 Shared Profile ComponentsNetwork Access Restrictions5-24User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 7 To edit a

Seite 89 - Network WAN

5-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsCommand Authorization SetsTo delete a shared

Seite 90 - Remote Access Policy

ContentsxviiiUser Guide for Cisco Secure ACS for Windows Server78-16592-01CHAPTER 13 User Databases 13-1CiscoSecure User Database 13-2About the Cisco

Seite 91 - Administrative Access Policy

Chapter 5 Shared Profile ComponentsCommand Authorization Sets5-26User Guide for Cisco Secure ACS for Windows Server78-16592-01About Command Auth

Seite 92

5-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsCommand Authorization SetsTo offer fine-grai

Seite 93

Chapter 5 Shared Profile ComponentsCommand Authorization Sets5-28User Guide for Cisco Secure ACS for Windows Server78-16592-01Cisco Secure ACS h

Seite 94 - Database

5-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsCommand Authorization Sets• Device Managemen

Seite 95 - Suggested Deployment Sequence

Chapter 5 Shared Profile ComponentsCommand Authorization Sets5-30User Guide for Cisco Secure ACS for Windows Server78-16592-01For example, if a

Seite 96

5-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsCommand Authorization SetsTo permit/deny com

Seite 97

Chapter 5 Shared Profile ComponentsCommand Authorization Sets5-32User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 6 If Cisco Se

Seite 98

5-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsCommand Authorization Setsc. Click Add Comma

Seite 99 - Interface Configuration

Chapter 5 Shared Profile ComponentsCommand Authorization Sets5-34User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 3 From the Na

Seite 100 - Interface Design Concepts

5-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 5 Shared Profile ComponentsCommand Authorization SetsDeleting a Command

Seite 101 - Defining New User Data Fields

xixUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsGeneric LDAP 13-32Cisco Secure ACS Authentication Process with a Generic LDAP

Seite 102 - Advanced Options

Chapter 5 Shared Profile ComponentsCommand Authorization Sets5-36User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 103 - 78-16592-01

CHAPTER 6-1User Guide for Cisco Secure ACS for Windows Server78-16592-016User Group ManagementThis chapter provides information about setting up and m

Seite 104 - Interface

Chapter 6 User Group ManagementAbout User Group Setup Features and Functions6-2User Guide for Cisco Secure ACS for Windows Server78-16592-01Abou

Seite 105

6-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementBasic User Group SettingsIf you have configured C

Seite 106

Chapter 6 User Group ManagementBasic User Group Settings6-4User Guide for Cisco Secure ACS for Windows Server78-16592-01Group DisablementYou per

Seite 107 - Setting Options for TACACS+

6-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementBasic User Group SettingsPerform this procedure t

Seite 108

Chapter 6 User Group ManagementBasic User Group Settings6-6User Guide for Cisco Secure ACS for Windows Server78-16592-01To define the times duri

Seite 109

6-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementBasic User Group SettingsSetting Callback Options

Seite 110

Chapter 6 User Group ManagementBasic User Group Settings6-8User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 5 To continue speci

Seite 111

6-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementBasic User Group SettingsNote When an authenticat

Seite 112

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOM

Seite 113

ContentsxxUser Guide for Cisco Secure ACS for Windows Server78-16592-01PAP Procedure Output 13-65CHAP/MS-CHAP/ARAP Authentication Procedure Input 13-

Seite 114 - Attributes

Chapter 6 User Group ManagementBasic User Group Settings6-10User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 4 To define and ap

Seite 115

6-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementBasic User Group SettingsStep 5 To permit or den

Seite 116

Chapter 6 User Group ManagementBasic User Group Settings6-12User Guide for Cisco Secure ACS for Windows Server78-16592-01Note The total number o

Seite 117 - Network Configuration

6-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementBasic User Group SettingsNote A session is any t

Seite 118 - About Distributed Systems

Chapter 6 User Group ManagementBasic User Group Settings6-14User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 6 To continue spec

Seite 119

6-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementBasic User Group Settingsnetwork fails, the quot

Seite 120 - Proxy in Distributed Systems

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-16User Guide for Cisco Secure ACS for Windows Server78-16592-01Note U

Seite 121 - Fallback on Failed Connection

6-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group Settings• To c

Seite 122 - Proxy in an Enterprise

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-18User Guide for Cisco Secure ACS for Windows Server78-16592-01Settin

Seite 123 - • Log them locally

6-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsStep 4

Seite 124 - Network Device Searches

xxiUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsNAC Databases 14-10About NAC Databases 14-10About NAC Credentials and Attribu

Seite 125 - Searching for Network Devices

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-20User Guide for Cisco Secure ACS for Windows Server78-16592-01Note T

Seite 126

6-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsEnabli

Seite 127 - AAA Client Configuration

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-22User Guide for Cisco Secure ACS for Windows Server78-16592-01the ca

Seite 128

6-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group Settingsand di

Seite 129

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-24User Guide for Cisco Secure ACS for Windows Server78-16592-01reques

Seite 130

6-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsTo set

Seite 131

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-26User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 8

Seite 132 - Adding a AAA Client

6-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsTip Fo

Seite 133

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-28User Guide for Cisco Secure ACS for Windows Server78-16592-01–Users

Seite 134

6-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group Settings• Assi

Seite 135 - Editing a AAA Client

ContentsxxiiUser Guide for Cisco Secure ACS for Windows Server78-16592-01Performance of Unknown User Authentication 15-8Added Authentication Latency

Seite 136

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-30User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 5

Seite 137 - AAA Server Configuration

6-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsStep 6

Seite 138

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-32User Guide for Cisco Secure ACS for Windows Server78-16592-01To emp

Seite 139

6-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsConfig

Seite 140 - Adding a AAA Server

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-34User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 6

Seite 141

6-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsTip To

Seite 142 - Editing a AAA Server

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-36User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 3

Seite 143

6-37User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsConfig

Seite 144 - Deleting a AAA Server

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-38User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 5

Seite 145 - Adding a Network Device Group

6-39User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsTo con

Seite 146

xxiiiUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsNAC Group Mapping 16-13Configuring NAC Group Mapping 16-13RADIUS-Based Grou

Seite 147

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-40User Guide for Cisco Secure ACS for Windows Server78-16592-01Config

Seite 148

6-41User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsStep 3

Seite 149

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-42User Guide for Cisco Secure ACS for Windows Server78-16592-01The Ci

Seite 150

6-43User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsStep 7

Seite 151

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-44User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 3

Seite 152

6-45User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsCisco

Seite 153

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-46User Guide for Cisco Secure ACS for Windows Server78-16592-01Config

Seite 154 - Step 4 Click OK

6-47User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsStep 5

Seite 155 - Shared Profile Components

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-48User Guide for Cisco Secure ACS for Windows Server78-16592-01The fo

Seite 156 - Network Access Filters

6-49User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsNote T

Seite 157

ContentsxxivUser Guide for Cisco Secure ACS for Windows Server78-16592-01Cisco VPN 3000 Concentrator Dictionary of RADIUS VSAs C-9Cisco VPN 5000 Conc

Seite 158

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-50User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 2

Seite 159

6-51User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsTo con

Seite 160

Chapter 6 User Group ManagementConfiguration-specific User Group Settings6-52User Guide for Cisco Secure ACS for Windows Server78-16592-01Note T

Seite 161 - Downloadable IP ACLs

6-53User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementConfiguration-specific User Group SettingsConfig

Seite 162 - About Downloadable IP ACLs

Chapter 6 User Group ManagementGroup Setting Management6-54User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 6 To save the group

Seite 163

6-55User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 6 User Group ManagementGroup Setting ManagementResetting Usage Quota Co

Seite 164 - Adding a Downloadable IP ACL

Chapter 6 User Group ManagementGroup Setting Management6-56User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 5 Click Submit.Note

Seite 165

CHAPTER 7-1User Guide for Cisco Secure ACS for Windows Server78-16592-017User ManagementThis chapter provides information about setting up and managin

Seite 166

Chapter 7 User ManagementAbout User Databases7-2User Guide for Cisco Secure ACS for Windows Server78-16592-01 From within the User Setup section

Seite 167 - Editing a Downloadable IP ACL

7-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementBasic User Setup Options• Windows Database—Authenticate

Seite 168 - Network Access Restrictions

xxvUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsADD_NAS Statements D-21DEL_NAS Statements D-23Import File Example D-24Exporti

Seite 169

Chapter 7 User ManagementBasic User Setup Options7-4User Guide for Cisco Secure ACS for Windows Server78-16592-01This section contains the follo

Seite 170

7-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementBasic User Setup OptionsStep 4 Make sure that the Acco

Seite 171 - About IP-based NAR Filters

Chapter 7 User ManagementBasic User Setup Options7-6User Guide for Cisco Secure ACS for Windows Server78-16592-01Tip For lengthy account configu

Seite 172

7-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementBasic User Setup OptionsSetting a Separate CHAP/MS-CHAP

Seite 173

Chapter 7 User ManagementBasic User Setup Options7-8User Guide for Cisco Secure ACS for Windows Server78-16592-01Assigning a User to a GroupA us

Seite 174

7-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementBasic User Setup OptionsSetting User Callback OptionCal

Seite 175

Chapter 7 User ManagementBasic User Setup Options7-10User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 3 Do one of the following

Seite 176

7-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementBasic User Setup Options• Assigned by AAA client pool—

Seite 177

Chapter 7 User ManagementBasic User Setup Options7-12User Guide for Cisco Secure ACS for Windows Server78-16592-01Typically, you define (shared)

Seite 178

7-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementBasic User Setup OptionsStep 2 To apply a previously c

Seite 179 - Command Authorization Sets

ContentsxxviUser Guide for Cisco Secure ACS for Windows Server78-16592-01APPENDIX E VPDN Processing E-1VPDN Process E-1APPENDIX F RDBMS Synchronizati

Seite 180

Chapter 7 User ManagementBasic User Setup Options7-14User Guide for Cisco Secure ACS for Windows Server78-16592-01c. Select or enter the informa

Seite 181

7-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementBasic User Setup Optionsc. Complete the following boxe

Seite 182

Chapter 7 User ManagementBasic User Setup Options7-16User Guide for Cisco Secure ACS for Windows Server78-16592-01d. Click enter.The information

Seite 183

7-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementBasic User Setup OptionsTo set max sessions options fo

Seite 184 - About Pattern Matching

Chapter 7 User ManagementBasic User Setup Options7-18User Guide for Cisco Secure ACS for Windows Server78-16592-01Setting User Usage Quotas Opti

Seite 185

7-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementBasic User Setup Optionswith ISDN, the quota is not up

Seite 186

Chapter 7 User ManagementBasic User Setup Options7-20User Guide for Cisco Secure ACS for Windows Server78-16592-01c. Select the period for which

Seite 187

7-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementBasic User Setup Optionsb. Select the Disable account

Seite 188

Chapter 7 User ManagementAdvanced User Authentication Settings7-22User Guide for Cisco Secure ACS for Windows Server78-16592-01To assign a downl

Seite 189 - Step 4 Click Delete

7-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication Settings• RADIUS Attribut

Seite 190

xxviiUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsCSMon G-4Monitoring G-5Recording G-6Notification G-7Response G-7CSTacacs an

Seite 191 - User Group Management

Chapter 7 User ManagementAdvanced User Authentication Settings7-24User Guide for Cisco Secure ACS for Windows Server78-16592-01Configuring TACAC

Seite 192 - Group TACACS+ Settings

7-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsBefore You Begin•

Seite 193 - Basic User Group Settings

Chapter 7 User ManagementAdvanced User Authentication Settings7-26User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 6 Do one of

Seite 194 - Group Disablement

7-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsTo specify shell

Seite 195

Chapter 7 User ManagementAdvanced User Authentication Settings7-28User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 7 To define

Seite 196

7-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsConfiguring a PIX

Seite 197

Chapter 7 User ManagementAdvanced User Authentication Settings7-30User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 4 To assign

Seite 198

7-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication Settings• Assign a device

Seite 199

Chapter 7 User ManagementAdvanced User Authentication Settings7-32User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 5 To assign

Seite 200

7-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsStep 3 To allow T

Seite 201

ContentsxxviiiUser Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 202

Chapter 7 User ManagementAdvanced User Authentication Settings7-34User Guide for Cisco Secure ACS for Windows Server78-16592-01Note This is the

Seite 203

7-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsStep 4 If you sel

Seite 204

Chapter 7 User ManagementAdvanced User Authentication Settings7-36User Guide for Cisco Secure ACS for Windows Server78-16592-01To set the option

Seite 205

7-37User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsSetting TACACS+ O

Seite 206

Chapter 7 User ManagementAdvanced User Authentication Settings7-38User Guide for Cisco Secure ACS for Windows Server78-16592-01This section cont

Seite 207

7-39User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsNote For a list a

Seite 208

Chapter 7 User ManagementAdvanced User Authentication Settings7-40User Guide for Cisco Secure ACS for Windows Server78-16592-01replace the assoc

Seite 209

7-41User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsSetting Cisco Air

Seite 210

Chapter 7 User ManagementAdvanced User Authentication Settings7-42User Guide for Cisco Secure ACS for Windows Server78-16592-01To configure and

Seite 211

7-43User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsSetting Ascend RA

Seite 212

xxixUser Guide for Cisco Secure ACS for Windows Server78-16592-01PrefaceThis document will help you configure and use Cisco Secure Access Control Serv

Seite 213

Chapter 7 User ManagementAdvanced User Authentication Settings7-44User Guide for Cisco Secure ACS for Windows Server78-16592-01For more informat

Seite 214

7-45User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsNote To hide or d

Seite 215

Chapter 7 User ManagementAdvanced User Authentication Settings7-46User Guide for Cisco Secure ACS for Windows Server78-16592-01Setting Cisco VPN

Seite 216

7-47User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsStep 3 In the Cis

Seite 217

Chapter 7 User ManagementAdvanced User Authentication Settings7-48User Guide for Cisco Secure ACS for Windows Server78-16592-01The Microsoft RAD

Seite 218

7-49User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsStep 3 In the Mic

Seite 219

Chapter 7 User ManagementAdvanced User Authentication Settings7-50User Guide for Cisco Secure ACS for Windows Server78-16592-01Note To hide or d

Seite 220

7-51User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsSetting Juniper R

Seite 221

Chapter 7 User ManagementAdvanced User Authentication Settings7-52User Guide for Cisco Secure ACS for Windows Server78-16592-01For more informat

Seite 222

7-53User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementAdvanced User Authentication SettingsStep 2 Before con

Seite 223

iiiUser Guide for Cisco Secure ACS for Windows Server78-16592-01CONTENTSPreface xxixAudience xxixOrganization xxixConventions xxxiProduct Documentati

Seite 224

PrefaceOrganizationxxxUser Guide for Cisco Secure ACS for Windows Server78-16592-01• Chapter 5, “Shared Profile Components”—Concepts and procedures re

Seite 225

Chapter 7 User ManagementUser Management7-54User Guide for Cisco Secure ACS for Windows Server78-16592-01To configure and enable custom RADIUS a

Seite 226

7-55User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementUser Management• Deleting a User Account, page 7-57• R

Seite 227 - User Group

Chapter 7 User ManagementUser Management7-56User Guide for Cisco Secure ACS for Windows Server78-16592-01Tip You can use wildcard characters (*)

Seite 228

7-57User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementUser ManagementStep 3 Click Add/Edit.The User Setup Ed

Seite 229

Chapter 7 User ManagementUser Management7-58User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 3 Click Add/Edit.Step 4 At the bot

Seite 230

7-59User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 7 User ManagementUser ManagementStep 5 Click Submit at the bottom of th

Seite 231

Chapter 7 User ManagementUser Management7-60User Guide for Cisco Secure ACS for Windows Server78-16592-01Note If the user authenticates with a W

Seite 232

CHAPTER 8-1User Guide for Cisco Secure ACS for Windows Server78-16592-018System Configuration: BasicThis chapter addresses the basic features found in

Seite 233 - Ascend-Remote-Addr

Chapter 8 System Configuration: BasicService Control8-2User Guide for Cisco Secure ACS for Windows Server78-16592-01Tip You can configure Cisco

Seite 234

8-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 8 System Configuration: BasicLoggingStep 1 In the navigation bar, click

Seite 235

xxxiUser Guide for Cisco Secure ACS for Windows Server78-16592-01PrefaceConventions• Appendix A, “Troubleshooting”—How to identify and solve certain p

Seite 236

Chapter 8 System Configuration: BasicDate Format Control8-4User Guide for Cisco Secure ACS for Windows Server78-16592-01report generated on July

Seite 237

8-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 8 System Configuration: BasicLocal Password ManagementLocal Password Man

Seite 238

Chapter 8 System Configuration: BasicLocal Password Management8-6User Guide for Cisco Secure ACS for Windows Server78-16592-01–Upon remote user

Seite 239

8-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 8 System Configuration: BasicLocal Password ManagementConfiguring Local

Seite 240

Chapter 8 System Configuration: BasicLocal Password Management8-8User Guide for Cisco Secure ACS for Windows Server78-16592-01d. If you want Cis

Seite 241

8-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 8 System Configuration: BasicCisco Secure ACS BackupCisco Secure ACS Bac

Seite 242

Chapter 8 System Configuration: BasicCisco Secure ACS Backup8-10User Guide for Cisco Secure ACS for Windows Server78-16592-01where drive is the

Seite 243

8-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 8 System Configuration: BasicCisco Secure ACS BackupBackup OptionsThe A

Seite 244 - Group Setting Management

Chapter 8 System Configuration: BasicCisco Secure ACS Backup8-12User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 2 Click ACS Ba

Seite 245 - Renaming a User Group

8-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 8 System Configuration: BasicCisco Secure ACS BackupTip Clicking times

Seite 246

PrefaceProduct DocumentationxxxiiUser Guide for Cisco Secure ACS for Windows Server78-16592-01Tip Identifies information to help you get the most bene

Seite 247 - User Management

Chapter 8 System Configuration: BasicCisco Secure ACS System Restore8-14User Guide for Cisco Secure ACS for Windows Server78-16592-01Cisco Secur

Seite 248 - About User Databases

8-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 8 System Configuration: BasicCisco Secure ACS System Restorehard drive.

Seite 249 - Basic User Setup Options

Chapter 8 System Configuration: BasicCisco Secure ACS System Restore8-16User Guide for Cisco Secure ACS for Windows Server78-16592-01Reports of

Seite 250 - Adding a Basic User Account

8-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 8 System Configuration: BasicCisco Secure ACS Active Service Management

Seite 251

Chapter 8 System Configuration: BasicCisco Secure ACS Active Service Management8-18User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 252

8-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 8 System Configuration: BasicCisco Secure ACS Active Service Management

Seite 253

Chapter 8 System Configuration: BasicCisco Secure ACS Active Service Management8-20User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 254 - Assigning a User to a Group

8-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 8 System Configuration: BasicVoIP Accounting Configurationc. In the SMT

Seite 255 - Setting User Callback Option

Chapter 8 System Configuration: BasicVoIP Accounting Configuration8-22User Guide for Cisco Secure ACS for Windows Server78-16592-01To configure

Seite 256

CHAPTER 9-1User Guide for Cisco Secure ACS for Windows Server78-16592-019System Configuration: AdvancedThis chapter addresses the CiscoSecure Database

Seite 257

xxxiiiUser Guide for Cisco Secure ACS for Windows Server78-16592-01PrefaceRelated DocumentationRelated DocumentationNote We sometimes update the print

Seite 258

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-2User Guide for Cisco Secure ACS for Windows Server78-16592-01• Replic

Seite 259

9-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication• IP poo

Seite 260

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-4User Guide for Cisco Secure ACS for Windows Server78-16592-01be runni

Seite 261

9-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedCiscoSecure Database Replicationc. The p

Seite 262

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-6User Guide for Cisco Secure ACS for Windows Server78-16592-01c. The s

Seite 263

9-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedCiscoSecure Database ReplicationReplicat

Seite 264

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-8User Guide for Cisco Secure ACS for Windows Server78-16592-01–In its

Seite 265

9-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication• A seco

Seite 266

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-10User Guide for Cisco Secure ACS for Windows Server78-16592-01of sett

Seite 267

9-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedCiscoSecure Database ReplicationFor mor

Seite 268

PrefaceRelated DocumentationxxxivUser Guide for Cisco Secure ACS for Windows Server78-16592-01Table 2 describes a set of white papers about Cisco Secu

Seite 269 - TACACS+ Settings (User)

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-12User Guide for Cisco Secure ACS for Windows Server78-16592-01Note If

Seite 270

9-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication–Manual

Seite 271

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-14User Guide for Cisco Secure ACS for Windows Server78-16592-01Note Th

Seite 272

9-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedCiscoSecure Database ReplicationInbound

Seite 273

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-16User Guide for Cisco Secure ACS for Windows Server78-16592-01To impl

Seite 274

9-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedCiscoSecure Database ReplicationConfigu

Seite 275

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-18User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 4

Seite 276

9-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedCiscoSecure Database ReplicationNote Fo

Seite 277

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-20User Guide for Cisco Secure ACS for Windows Server78-16592-01Note If

Seite 278

9-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedCiscoSecure Database ReplicationNote Re

Seite 279

xxxvUser Guide for Cisco Secure ACS for Windows Server78-16592-01PrefaceObtaining DocumentationObtaining DocumentationCisco documentation and addition

Seite 280

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-22User Guide for Cisco Secure ACS for Windows Server78-16592-01Note If

Seite 281

9-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedCiscoSecure Database ReplicationTip Cli

Seite 282

Chapter 9 System Configuration: AdvancedCiscoSecure Database Replication9-24User Guide for Cisco Secure ACS for Windows Server78-16592-01c. Repe

Seite 283 - RADIUS Attributes

9-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedRDBMS SynchronizationDatabase Replicati

Seite 284

Chapter 9 System Configuration: AdvancedRDBMS Synchronization9-26User Guide for Cisco Secure ACS for Windows Server78-16592-01–Synchronization P

Seite 285

9-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedRDBMS SynchronizationUsersAmong the use

Seite 286

Chapter 9 System Configuration: AdvancedRDBMS Synchronization9-28User Guide for Cisco Secure ACS for Windows Server78-16592-01• Specifying outbo

Seite 287

9-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedRDBMS SynchronizationNote If you intend

Seite 288

Chapter 9 System Configuration: AdvancedRDBMS Synchronization9-30User Guide for Cisco Secure ACS for Windows Server78-16592-01Figure 9-2 RDBMS S

Seite 289

9-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedRDBMS SynchronizationAbout the accountA

Seite 290

PrefaceDocumentation FeedbackxxxviUser Guide for Cisco Secure ACS for Windows Server78-16592-01Cisco.comYou can access the most current Cisco document

Seite 291

Chapter 9 System Configuration: AdvancedRDBMS Synchronization9-32User Guide for Cisco Secure ACS for Windows Server78-16592-01• Oracle 7—Contain

Seite 292

9-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedRDBMS SynchronizationReplaying transact

Seite 293

Chapter 9 System Configuration: AdvancedRDBMS Synchronization9-34User Guide for Cisco Secure ACS for Windows Server78-16592-01implementation. If

Seite 294

9-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedRDBMS SynchronizationStep 7 Schedule RD

Seite 295

Chapter 9 System Configuration: AdvancedRDBMS Synchronization9-36User Guide for Cisco Secure ACS for Windows Server78-16592-01Preparing for CSV-

Seite 296

9-37User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedRDBMS Synchronizationnet start CSDBSync

Seite 297

Chapter 9 System Configuration: AdvancedRDBMS Synchronization9-38User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 6 Complete th

Seite 298

9-39User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedRDBMS Synchronization• Password—Specifi

Seite 299

Chapter 9 System Configuration: AdvancedRDBMS Synchronization9-40User Guide for Cisco Secure ACS for Windows Server78-16592-01For more informati

Seite 300

9-41User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedRDBMS SynchronizationNote You do not ha

Seite 301 - Finding a User

xxxviiUser Guide for Cisco Secure ACS for Windows Server78-16592-01PrefaceObtaining Technical AssistanceYou can submit comments by using the response

Seite 302 - Disabling a User Account

Chapter 9 System Configuration: AdvancedRDBMS Synchronization9-42User Guide for Cisco Secure ACS for Windows Server78-16592-01Note For more info

Seite 303 - Deleting a User Account

9-43User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedRDBMS SynchronizationNote For more info

Seite 304

Chapter 9 System Configuration: AdvancedIP Pools Server9-44User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 2 Click RDBMS Synch

Seite 305

9-45User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedIP Pools Serveryou enable this feature,

Seite 306 - Saving User Settings

Chapter 9 System Configuration: AdvancedIP Pools Server9-46User Guide for Cisco Secure ACS for Windows Server78-16592-01You can determine whethe

Seite 307 - System Configuration: Basic

9-47User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedIP Pools ServerRefreshing the AAA Serve

Seite 308 - Service Control

Chapter 9 System Configuration: AdvancedIP Pools Server9-48User Guide for Cisco Secure ACS for Windows Server78-16592-01Note All addresses in an

Seite 309 - Date Format Control

9-49User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedIP Pools ServerNote All addresses in an

Seite 310

Chapter 9 System Configuration: AdvancedIP Pools Server9-50User Guide for Cisco Secure ACS for Windows Server78-16592-01The name pool table appe

Seite 311 - Local Password Management

9-51User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 9 System Configuration: AdvancedIP Pools Address RecoveryStep 4 Click D

Seite 312

PrefaceObtaining Technical AssistancexxxviiiUser Guide for Cisco Secure ACS for Windows Server78-16592-01recommended solutions. If your issue is not r

Seite 313

Chapter 9 System Configuration: AdvancedIP Pools Address Recovery9-52User Guide for Cisco Secure ACS for Windows Server78-16592-01Cisco Secure A

Seite 314

CHAPTER 10-1User Guide for Cisco Secure ACS for Windows Server78-16592-0110System Configuration: Authentication and CertificatesThis chapter addresses

Seite 315 - Cisco Secure ACS Backup

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-2User Guide for Cisco Secure ACS for Win

Seite 316 - Components Backed Up

10-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certifica

Seite 317 - Backup Options

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-4User Guide for Cisco Secure ACS for Win

Seite 318

10-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certifica

Seite 319

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-6User Guide for Cisco Secure ACS for Win

Seite 320

10-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certifica

Seite 321 - Components Restored

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-8User Guide for Cisco Secure ACS for Win

Seite 322 - Step 2 Click ACS Restore

10-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certifica

Seite 323 - System Monitoring

xxxixUser Guide for Cisco Secure ACS for Windows Server78-16592-01PrefaceObtaining Additional Publications and InformationObtaining Additional Publica

Seite 324 - System Monitoring Options

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-10User Guide for Cisco Secure ACS for Wi

Seite 325 - Setting Up System Monitoring

10-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certific

Seite 326 - Event Logging

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-12User Guide for Cisco Secure ACS for Wi

Seite 327 - VoIP Accounting Configuration

10-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certific

Seite 328 - Step 4 Click Submit

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-14User Guide for Cisco Secure ACS for Wi

Seite 329

10-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certific

Seite 330

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-16User Guide for Cisco Secure ACS for Wi

Seite 331

10-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certific

Seite 332 - Replication Process

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-18User Guide for Cisco Secure ACS for Wi

Seite 333

10-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certific

Seite 334

ContentsivUser Guide for Cisco Secure ACS for Windows Server78-16592-01AAA Protocols—TACACS+ and RADIUS 1-6TACACS+ 1-7RADIUS 1-7Authentication 1-8Aut

Seite 335 - Replication Frequency

PrefaceObtaining Additional Publications and InformationxlUser Guide for Cisco Secure ACS for Windows Server78-16592-01• Internet Protocol Journal is

Seite 336

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-20User Guide for Cisco Secure ACS for Wi

Seite 337

10-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certific

Seite 338 - Database Replication Logging

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-22User Guide for Cisco Secure ACS for Wi

Seite 339 - Replication Options

10-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certific

Seite 340 - Outbound Replication Options

Chapter 10 System Configuration: Authentication and CertificatesAbout Certification and EAP Protocols10-24User Guide for Cisco Secure ACS for Wi

Seite 341

10-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesAbout Certific

Seite 342

Chapter 10 System Configuration: Authentication and CertificatesGlobal Authentication Setup10-26User Guide for Cisco Secure ACS for Windows Serv

Seite 343 - Cisco Secure ACSes

10-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesGlobal Authent

Seite 344

Chapter 10 System Configuration: Authentication and CertificatesGlobal Authentication Setup10-28User Guide for Cisco Secure ACS for Windows Serv

Seite 345

10-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesGlobal Authent

Seite 346

CHAPTER1-1User Guide for Cisco Secure ACS for Windows Server78-16592-011OverviewThis chapter provides an overview of Cisco Secure ACS for Windows Serv

Seite 347 - Replicating Immediately

Chapter 10 System Configuration: Authentication and CertificatesGlobal Authentication Setup10-30User Guide for Cisco Secure ACS for Windows Serv

Seite 348

10-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesGlobal Authent

Seite 349 - Scheduling Replication

Chapter 10 System Configuration: Authentication and CertificatesGlobal Authentication Setup10-32User Guide for Cisco Secure ACS for Windows Serv

Seite 350

10-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesGlobal Authent

Seite 351

Chapter 10 System Configuration: Authentication and CertificatesCisco Secure ACS Certificate Setup10-34User Guide for Cisco Secure ACS for Windo

Seite 352

10-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesCisco Secure A

Seite 353 - RDBMS Synchronization

Chapter 10 System Configuration: Authentication and CertificatesCisco Secure ACS Certificate Setup10-36User Guide for Cisco Secure ACS for Windo

Seite 354 - About RDBMS Synchronization

10-37User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesCisco Secure A

Seite 355 - User Groups

Chapter 10 System Configuration: Authentication and CertificatesCisco Secure ACS Certificate Setup10-38User Guide for Cisco Secure ACS for Windo

Seite 356

10-39User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesCisco Secure A

Seite 357 - About CSDBSync

Chapter 1 OverviewThe Cisco Secure ACS Paradigm1-2User Guide for Cisco Secure ACS for Windows Server78-16592-01–Accessing the HTML Interface, pag

Seite 358

Chapter 10 System Configuration: Authentication and CertificatesCisco Secure ACS Certificate Setup10-40User Guide for Cisco Secure ACS for Windo

Seite 359

10-41User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesCisco Secure A

Seite 360

Chapter 10 System Configuration: Authentication and CertificatesCisco Secure ACS Certificate Setup10-42User Guide for Cisco Secure ACS for Windo

Seite 361

10-43User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesCisco Secure A

Seite 362

Chapter 10 System Configuration: Authentication and CertificatesCisco Secure ACS Certificate Setup10-44User Guide for Cisco Secure ACS for Windo

Seite 363

10-45User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesCisco Secure A

Seite 364

Chapter 10 System Configuration: Authentication and CertificatesCisco Secure ACS Certificate Setup10-46User Guide for Cisco Secure ACS for Windo

Seite 365 - Synchronization

10-47User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesCisco Secure A

Seite 366 - RDBMS Synchronization Options

Chapter 10 System Configuration: Authentication and CertificatesCisco Secure ACS Certificate Setup10-48User Guide for Cisco Secure ACS for Windo

Seite 367

10-49User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesCisco Secure A

Seite 368

1-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewCisco Secure ACS Specificationsservices that ensure a secure en

Seite 369

Chapter 10 System Configuration: Authentication and CertificatesCisco Secure ACS Certificate Setup10-50User Guide for Cisco Secure ACS for Windo

Seite 370

10-51User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 10 System Configuration: Authentication and CertificatesCisco Secure A

Seite 371

Chapter 10 System Configuration: Authentication and CertificatesCisco Secure ACS Certificate Setup10-52User Guide for Cisco Secure ACS for Windo

Seite 372 - IP Pools Server

CHAPTER 11-1User Guide for Cisco Secure ACS for Windows Server78-16592-0111Logs and ReportsCisco Secure ACS for Windows Server produces a variety of l

Seite 373

Chapter 11 Logs and ReportsLogging Formats11-2User Guide for Cisco Secure ACS for Windows Server78-16592-01Logging FormatsCisco Secure ACS logs

Seite 374

11-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsSpecial Logging AttributesThe content of these attri

Seite 375 - Adding a New IP Pool

Chapter 11 Logs and ReportsNAC Attributes in Logs11-4User Guide for Cisco Secure ACS for Windows Server78-16592-01Note Cisco Secure ACS cannot d

Seite 376 - Editing an IP Pool Definition

11-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsUpdate Packets in Accounting LogsPosture validation

Seite 377 - Resetting an IP Pool

Chapter 11 Logs and ReportsAbout Cisco Secure ACS Logs and Reports11-6User Guide for Cisco Secure ACS for Windows Server78-16592-01About Cisco S

Seite 378 - Deleting an IP Pool

11-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsAbout Cisco Secure ACS Logs and ReportsTable 11-1 Ac

Seite 379 - IP Pools Address Recovery

Chapter 1 OverviewCisco Secure ACS Specifications1-4User Guide for Cisco Secure ACS for Windows Server78-16592-01• Maximum users supported by the

Seite 380

Chapter 11 Logs and ReportsAbout Cisco Secure ACS Logs and Reports11-8User Guide for Cisco Secure ACS for Windows Server78-16592-01Failed Attemp

Seite 381

11-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsAbout Cisco Secure ACS Logs and ReportsDynamic Admin

Seite 382 - EAP-TLS Authentication

Chapter 11 Logs and ReportsAbout Cisco Secure ACS Logs and Reports11-10User Guide for Cisco Secure ACS for Windows Server78-16592-01Viewing the

Seite 383 - About the EAP-TLS Protocol

11-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsAbout Cisco Secure ACS Logs and ReportsTip You can

Seite 384 - EAP-TLS and Cisco Secure ACS

Chapter 11 Logs and ReportsAbout Cisco Secure ACS Logs and Reports11-12User Guide for Cisco Secure ACS for Windows Server78-16592-01Note Deletin

Seite 385

11-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsAbout Cisco Secure ACS Logs and ReportsFor more inf

Seite 386 - EAP-TLS Limitations

Chapter 11 Logs and ReportsAbout Cisco Secure ACS Logs and Reports11-14User Guide for Cisco Secure ACS for Windows Server78-16592-01Configuring

Seite 387

11-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsWorking with CSV LogsStep 4 To generate a new Admin

Seite 388 - PEAP Authentication

Chapter 11 Logs and ReportsWorking with CSV Logs11-16User Guide for Cisco Secure ACS for Windows Server78-16592-01Older files are named in the f

Seite 389 - PEAP and Cisco Secure ACS

11-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsWorking with CSV LogsEnabling or Disabling a CSV Lo

Seite 390

1-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewAAA Server Functions and ConceptsWhen you install Cisco Secure

Seite 391

Chapter 11 Logs and ReportsWorking with CSV Logs11-18User Guide for Cisco Secure ACS for Windows Server78-16592-01Viewing a CSV ReportWhen you s

Seite 392 - Enabling PEAP Authentication

11-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsWorking with CSV LogsTip To check for newer informa

Seite 393 - EAP-FAST Authentication

Chapter 11 Logs and ReportsWorking with CSV Logs11-20User Guide for Cisco Secure ACS for Windows Server78-16592-01• CSV file location—You can sp

Seite 394

11-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsWorking with ODBC LogsStep 7 To generate a new CSV

Seite 395 - About Master Keys

Chapter 11 Logs and ReportsWorking with ODBC Logs11-22User Guide for Cisco Secure ACS for Windows Server78-16592-01Preparing for ODBC LoggingTo

Seite 396

11-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsWorking with ODBC LogsStep 3 Click Add.Step 4 Selec

Seite 397 - About PACs

Chapter 11 Logs and ReportsWorking with ODBC Logs11-24User Guide for Cisco Secure ACS for Windows Server78-16592-01To configure an ODBC log, fol

Seite 398 - Automatic PAC Provisioning

11-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsWorking with ODBC LogsNote The user must have suffi

Seite 399

Chapter 11 Logs and ReportsRemote Logging11-26User Guide for Cisco Secure ACS for Windows Server78-16592-01c. Click the name of the ODBC log you

Seite 400 - Manual PAC Provisioning

11-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsRemote Logginggenerates the accounting logs in the

Seite 401 - Master Key and PAC TTLs

Chapter 1 OverviewAAA Server Functions and Concepts1-6User Guide for Cisco Secure ACS for Windows Server78-16592-01• Authorization, page 1-17• Ac

Seite 402 - Replication and EAP-FAST

Chapter 11 Logs and ReportsRemote Logging11-28User Guide for Cisco Secure ACS for Windows Server78-16592-01b. Add to the AAA Servers table each

Seite 403

11-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsRemote Loggingbehavior enables you to configure one

Seite 404

Chapter 11 Logs and ReportsRemote Logging11-30User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 5 Select the applicable remote l

Seite 405 - Enabling EAP-FAST

11-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsService LogsStep 8 Click Submit.Cisco Secure ACS sa

Seite 406 - Global Authentication Setup

Chapter 11 Logs and ReportsService Logs11-32User Guide for Cisco Secure ACS for Windows Server78-16592-01Services LoggedCisco Secure ACS generat

Seite 407

11-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 11 Logs and ReportsService LogsConfiguring Service LogsYou can configu

Seite 408

Chapter 11 Logs and ReportsService Logs11-34User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 3 To disable the service log file,

Seite 409

CHAPTER 12-1User Guide for Cisco Secure ACS for Windows Server78-16592-0112Administrators and Administrative PolicyThis chapter addresses the Cisco Se

Seite 410

Chapter 12 Administrators and Administrative PolicyAdministrator Accounts12-2User Guide for Cisco Secure ACS for Windows Server78-16592-01About

Seite 411

12-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 12 Administrators and Administrative PolicyAdministrator AccountsAdmini

Seite 412

1-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewAAA Server Functions and ConceptsTACACS+Cisco Secure ACS confor

Seite 413

Chapter 12 Administrators and Administrative PolicyAdministrator Accounts12-4User Guide for Cisco Secure ACS for Windows Server78-16592-01Note A

Seite 414

12-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 12 Administrators and Administrative PolicyAdministrator Accounts–VoIP

Seite 415

Chapter 12 Administrators and Administrative PolicyAdministrator Accounts12-6User Guide for Cisco Secure ACS for Windows Server78-16592-01–ACS B

Seite 416

12-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 12 Administrators and Administrative PolicyAdministrator AccountsAll pr

Seite 417

Chapter 12 Administrators and Administrative PolicyAdministrator Accounts12-8User Guide for Cisco Secure ACS for Windows Server78-16592-01Note Y

Seite 418

12-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 12 Administrators and Administrative PolicyAdministrator AccountsNote I

Seite 419

Chapter 12 Administrators and Administrative PolicyAdministrator Accounts12-10User Guide for Cisco Secure ACS for Windows Server78-16592-01Step

Seite 420

12-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 12 Administrators and Administrative PolicyAccess PolicyDeleting an Ad

Seite 421

Chapter 12 Administrators and Administrative PolicyAccess Policy12-12User Guide for Cisco Secure ACS for Windows Server78-16592-01Access Policy

Seite 422

12-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 12 Administrators and Administrative PolicyAccess PolicyCisco Secure A

Seite 423

Chapter 1 OverviewAAA Server Functions and Concepts1-8User Guide for Cisco Secure ACS for Windows Server78-16592-01• RFC 2868• RFC 2869The ports

Seite 424

Chapter 12 Administrators and Administrative PolicyAccess Policy12-14User Guide for Cisco Secure ACS for Windows Server78-16592-01Setting Up Acc

Seite 425 - Step 5 Click Delete

12-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 12 Administrators and Administrative PolicyAccess Policyb. For each IP

Seite 426

Chapter 12 Administrators and Administrative PolicySession Policy12-16User Guide for Cisco Secure ACS for Windows Server78-16592-01Session Polic

Seite 427

12-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 12 Administrators and Administrative PolicySession Policy• Respond to

Seite 428

Chapter 12 Administrators and Administrative PolicyAudit Policy12-18User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 5 Set the

Seite 429

CHAPTER 13-1User Guide for Cisco Secure ACS for Windows Server78-16592-0113User DatabasesCisco Secure ACS for Windows Server authenticates users again

Seite 430

Chapter 13 User DatabasesCiscoSecure User Database13-2User Guide for Cisco Secure ACS for Windows Server78-16592-01• Token Server User Databases

Seite 431

13-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesCiscoSecure User DatabaseUser Import and CreationThere

Seite 432

Chapter 13 User DatabasesAbout External User Databases13-4User Guide for Cisco Secure ACS for Windows Server78-16592-01Cisco Secure ACS. Any use

Seite 433 - Logs and Reports

13-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesAbout External User DatabasesFor Cisco Secure ACS to i

Seite 434 - Special Logging Attributes

1-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewAAA Server Functions and ConceptsThere is a fundamental implici

Seite 435

Chapter 13 User DatabasesAbout External User Databases13-6User Guide for Cisco Secure ACS for Windows Server78-16592-01• By Unknown User Policy—

Seite 436 - NAC Attributes in Logs

13-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User DatabaseWindows User DatabaseYou can conf

Seite 437

Chapter 13 User DatabasesWindows User Database13-8User Guide for Cisco Secure ACS for Windows Server78-16592-01What’s Supported with Windows Use

Seite 438 - Accounting Logs

13-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User DatabaseAuthentication with Windows User

Seite 439

Chapter 13 User DatabasesWindows User Database13-10User Guide for Cisco Secure ACS for Windows Server78-16592-01but no trust relationship is est

Seite 440

13-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User DatabaseWindows Dial-up Networking Clien

Seite 441

Chapter 13 User DatabasesWindows User Database13-12User Guide for Cisco Secure ACS for Windows Server78-16592-01To determine the format of a use

Seite 442 - Step 2 Click Logged-in Users

13-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User DatabaseNon-domain-qualified UsernamesCi

Seite 443 - Deleting Logged-in Users

Chapter 13 User DatabasesWindows User Database13-14User Guide for Cisco Secure ACS for Windows Server78-16592-01Note If your Domain List contain

Seite 444

13-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User DatabaseIf the authentication protocol u

Seite 445 - Cisco Secure ACS System Logs

vUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsAdministrative Sessions through a NAT Gateway 1-31Accessing the HTML Interface

Seite 446

Chapter 1 OverviewAAA Server Functions and Concepts1-10User Guide for Cisco Secure ACS for Windows Server78-16592-01Authentication and User Datab

Seite 447 - Working with CSV Logs

Chapter 13 User DatabasesWindows User Database13-16User Guide for Cisco Secure ACS for Windows Server78-16592-01EAP-TLS Domain StrippingIf you u

Seite 448 - CSV Log File Locations

13-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User DatabaseWhen machine authentication is e

Seite 449

Chapter 13 User DatabasesWindows User Database13-18User Guide for Cisco Secure ACS for Windows Server78-16592-01Cisco Secure ACS supports both E

Seite 450 - Viewing a CSV Report

13-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User Databasethat was added to the local mach

Seite 451 - Configuring a CSV Log

Chapter 13 User DatabasesWindows User Database13-20User Guide for Cisco Secure ACS for Windows Server78-16592-01–Calling-Station-Id value not fo

Seite 452

13-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User DatabaseClient operating systems support

Seite 453 - Working with ODBC Logs

Chapter 13 User DatabasesWindows User Database13-22User Guide for Cisco Secure ACS for Windows Server78-16592-01d. On the Protected EAP Properti

Seite 454 - Preparing for ODBC Logging

13-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User DatabaseNote End-user client computers a

Seite 455 - Configuring an ODBC Log

Chapter 13 User DatabasesWindows User Database13-24User Guide for Cisco Secure ACS for Windows Server78-16592-01Cisco Secure ACS allows you to c

Seite 456

13-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User DatabaseUser-Changeable Passwords with W

Seite 457

1-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewAAA Server Functions and ConceptsTable 1-3 specifies EAP authe

Seite 458 - Remote Logging

Chapter 13 User DatabasesWindows User Database13-26User Guide for Cisco Secure ACS for Windows Server78-16592-01Preparing Users for Authenticati

Seite 459

13-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User DatabaseTip Windows dialin permission is

Seite 460 - Remote Logging Options

Chapter 13 User DatabasesWindows User Database13-28User Guide for Cisco Secure ACS for Windows Server78-16592-01Note The check boxes under MS CH

Seite 461

13-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User Database• EAP-TLS and PEAP machine authe

Seite 462

Chapter 13 User DatabasesWindows User Database13-30User Guide for Cisco Secure ACS for Windows Server78-16592-01Note If you do not change the va

Seite 463 - Service Logs

13-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesWindows User DatabaseStep 3 Click Windows Database.If

Seite 464 - Services Logged

Chapter 13 User DatabasesGeneric LDAP13-32User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 7 Click Submit.Cisco Secure ACS save

Seite 465 - Configuring Service Logs

13-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesGeneric LDAP• LDAP Failover, page 13-36• LDAP Configu

Seite 466

Chapter 13 User DatabasesGeneric LDAP13-34User Guide for Cisco Secure ACS for Windows Server78-16592-01For each LDAP instance, you can add or le

Seite 467 - Administrator Accounts

13-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesGeneric LDAPIf you choose to make use of domain filte

Seite 468 - About Administrator Accounts

Chapter 1 OverviewAAA Server Functions and Concepts1-12User Guide for Cisco Secure ACS for Windows Server78-16592-01• PEAP(EAP-GTC)• PEAP(EAP-MSC

Seite 469 - Administrator Privileges

Chapter 13 User DatabasesGeneric LDAP13-36User Guide for Cisco Secure ACS for Windows Server78-16592-01Note With this option, Cisco Secure ACS s

Seite 470

13-37User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesGeneric LDAPUnsuccessful Previous Authentication with

Seite 471

Chapter 13 User DatabasesGeneric LDAP13-38User Guide for Cisco Secure ACS for Windows Server78-16592-01This table contains the following options

Seite 472

13-39User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesGeneric LDAP–Strip domain before submitting username

Seite 473

Chapter 13 User DatabasesGeneric LDAP13-40User Guide for Cisco Secure ACS for Windows Server78-16592-01For example, if the delimiter character i

Seite 474

13-41User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesGeneric LDAP–UserObjectType—The name of the attribute

Seite 475

Chapter 13 User DatabasesGeneric LDAP13-42User Guide for Cisco Secure ACS for Windows Server78-16592-01–Port—The TCP/IP port number on which the

Seite 476

13-43User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesGeneric LDAP–Admin DN—The DN of the administrator; th

Seite 477 - Access Policy

Chapter 13 User DatabasesGeneric LDAP13-44User Guide for Cisco Secure ACS for Windows Server78-16592-01To configure Cisco Secure ACS to use the

Seite 478 - Access Policy Options

13-45User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesGeneric LDAPStep 8 If you want to limit authenticatio

Seite 479

1-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewAAA Server Functions and Concepts• ARAP—Uses a two-way challen

Seite 480 - Setting Up Access Policy

Chapter 13 User DatabasesGeneric LDAP13-46User Guide for Cisco Secure ACS for Windows Server78-16592-01Note For information about domain filteri

Seite 481

13-47User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesGeneric LDAPStep 13 In the User Object Class box, typ

Seite 482 - Session Policy

Chapter 13 User DatabasesGeneric LDAP13-48User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 20 For the Primary LDAP Server and S

Seite 483 - Setting Up Session Policy

13-49User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesNovell NDS DatabaseFor example:uid=joesmith,ou=member

Seite 484 - Audit Policy

Chapter 13 User DatabasesNovell NDS Database13-50User Guide for Cisco Secure ACS for Windows Server78-16592-01About Novell NDS User DatabasesCis

Seite 485 - User Databases

13-51User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesNovell NDS DatabaseFor users to authenticate against

Seite 486 - CiscoSecure User Database

Chapter 13 User DatabasesNovell NDS Database13-52User Guide for Cisco Secure ACS for Windows Server78-16592-01Novell NDS External User Database

Seite 487 - User Import and Creation

13-53User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesNovell NDS DatabaseNote If the administrator username

Seite 488 - About External User Databases

Chapter 13 User DatabasesNovell NDS Database13-54User Guide for Cisco Secure ACS for Windows Server78-16592-01Before You BeginThe Novell Request

Seite 489

13-55User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesODBC DatabaseFor more information about the content o

Seite 490 - External user

Chapter 1 OverviewAAA Server Functions and Concepts1-14User Guide for Cisco Secure ACS for Windows Server78-16592-01• EAP-FAST—EAP Flexible Authe

Seite 491 - Windows User Database

Chapter 13 User DatabasesODBC Database13-56User Guide for Cisco Secure ACS for Windows Server78-16592-01ACS to authenticate against an ODBC-comp

Seite 492

13-57User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesODBC Database• EAP-TLS Authentication Procedure Input

Seite 493 - Trust Relationships

Chapter 13 User DatabasesODBC Database13-58User Guide for Cisco Secure ACS for Windows Server78-16592-01• Group Mapping for Unknown Users—Cisco

Seite 494

13-59User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesODBC DatabaseCisco Secure ACS grants authorization ba

Seite 495

Chapter 13 User DatabasesODBC Database13-60User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 4 Write the stored procedures inten

Seite 496

13-61User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesODBC DatabaseThe Cisco Secure ACS product CD provides

Seite 497

Chapter 13 User DatabasesODBC Database13-62User Guide for Cisco Secure ACS for Windows Server78-16592-01will default to case sensitive, whereas

Seite 498 - UPN Usernames

13-63User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesODBC DatabaseGRANT EXECUTE ON dbo.CSNTAuthUserPap TO

Seite 499

Chapter 13 User DatabasesODBC Database13-64User Guide for Cisco Secure ACS for Windows Server78-16592-01Sample Routine for Generating an EAP-TLS

Seite 500 - Machine Authentication

13-65User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesODBC DatabaseThe input names are for guidance only. P

Seite 501

1-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewAAA Server Functions and Concepts• Outbound passwords—The TACA

Seite 502

Chapter 13 User DatabasesODBC Database13-66User Guide for Cisco Secure ACS for Windows Server78-16592-01Note If the ODBC database returns data i

Seite 503 - Machine Access Restrictions

13-67User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesODBC DatabaseThe CSNTGroup and CSNTacctInfo fields ar

Seite 504

Chapter 13 User DatabasesODBC Database13-68User Guide for Cisco Secure ACS for Windows Server78-16592-01Note Because Cisco Secure ACS performs a

Seite 505

13-69User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesODBC DatabaseThe CSNTGroup and CSNTacctInfo fields ar

Seite 506

Chapter 13 User DatabasesODBC Database13-70User Guide for Cisco Secure ACS for Windows Server78-16592-01Configuring a System Data Source Name fo

Seite 507

13-71User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesODBC DatabaseStep 10 Close the ODBC Data Source Admin

Seite 508

Chapter 13 User DatabasesODBC Database13-72User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 6 From the System DSN list, select

Seite 509

13-73User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesODBC DatabaseStep 11 From the DSN Procedure Type list

Seite 510

Chapter 13 User DatabasesODBC Database13-74User Guide for Cisco Secure ACS for Windows Server78-16592-01Note If you enabled CHAP/MS-CHAP/ARAP au

Seite 511

13-75User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesLEAP Proxy RADIUS Server DatabaseLEAP Proxy RADIUS Se

Seite 512

Chapter 1 OverviewAAA Server Functions and Concepts1-16User Guide for Cisco Secure ACS for Windows Server78-16592-01For information on the requir

Seite 513

Chapter 13 User DatabasesLEAP Proxy RADIUS Server Database13-76User Guide for Cisco Secure ACS for Windows Server78-16592-01Configuring a LEAP P

Seite 514

13-77User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesLEAP Proxy RADIUS Server DatabaseStep 7 In the follow

Seite 515

Chapter 13 User DatabasesToken Server User Databases13-78User Guide for Cisco Secure ACS for Windows Server78-16592-01Token Server User Database

Seite 516 - Generic LDAP

13-79User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesToken Server User DatabasesFor RSA SecurID, Cisco Sec

Seite 517 - Multiple LDAP Instances

Chapter 13 User DatabasesToken Server User Databases13-80User Guide for Cisco Secure ACS for Windows Server78-16592-01About RADIUS-Enabled Token

Seite 518 - Domain Filtering

13-81User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesToken Server User DatabasesCisco Secure ACS expects t

Seite 519

Chapter 13 User DatabasesToken Server User Databases13-82User Guide for Cisco Secure ACS for Windows Server78-16592-01c. Click Submit.Cisco Secu

Seite 520 - LDAP Failover

13-83User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesToken Server User Databases• Timeout (seconds):—The n

Seite 521 - LDAP Configuration Options

Chapter 13 User DatabasesToken Server User Databases13-84User Guide for Cisco Secure ACS for Windows Server78-16592-01Note You should only use t

Seite 522

13-85User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesToken Server User DatabasesConfiguring an RSA SecurID

Seite 523

1-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewAAA Server Functions and Concepts• Configurable character stri

Seite 524

Chapter 13 User DatabasesDeleting an External User Database Configuration13-86User Guide for Cisco Secure ACS for Windows Server78-16592-01Step

Seite 525

13-87User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 13 User DatabasesDeleting an External User Database ConfigurationStep

Seite 526

Chapter 13 User DatabasesDeleting an External User Database Configuration13-88User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 527

CHAPTER 14-1User Guide for Cisco Secure ACS for Windows Server78-16592-0114Network Admission ControlNAC enables you to control the degree of access pe

Seite 528

Chapter 14 Network Admission ControlAbout Network Admission Control14-2User Guide for Cisco Secure ACS for Windows Server78-16592-01NAC AAA Comp

Seite 529

14-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlAbout Network Admission ControlPosture Vali

Seite 530

Chapter 14 Network Admission ControlAbout Network Admission Control14-4User Guide for Cisco Secure ACS for Windows Server78-16592-016. Cisco Sec

Seite 531

14-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlImplementing Network Admission ControlFrom

Seite 532

Chapter 14 Network Admission ControlImplementing Network Admission Control14-6User Guide for Cisco Secure ACS for Windows Server78-16592-01To im

Seite 533 - Novell NDS Database

14-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlImplementing Network Admission ControlStep

Seite 534

Chapter 1 OverviewAAA Server Functions and Concepts1-18User Guide for Cisco Secure ACS for Windows Server78-16592-01This section contains the fol

Seite 535 - User Contexts

Chapter 14 Network Admission ControlImplementing Network Admission Control14-8User Guide for Cisco Secure ACS for Windows Server78-16592-01b. Cr

Seite 536

14-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlImplementing Network Admission Controlb. (O

Seite 537

Chapter 14 Network Admission ControlNAC Databases14-10User Guide for Cisco Secure ACS for Windows Server78-16592-01NAC DatabasesThis section con

Seite 538

14-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC Databasesmandatory credential types. T

Seite 539 - ODBC Database

Chapter 14 Network Admission ControlNAC Databases14-12User Guide for Cisco Secure ACS for Windows Server78-16592-01Cisco Secure ACS communicates

Seite 540

14-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC Databases–Name—Displays the policy nam

Seite 541

Chapter 14 Network Admission ControlNAC Databases14-14User Guide for Cisco Secure ACS for Windows Server78-16592-01Configuring a NAC DatabaseThi

Seite 542 - External User Database

14-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC DatabasesStep 6 Click Configure.Cautio

Seite 543 - Relational Database

Chapter 14 Network Admission ControlNAC Policies14-16User Guide for Cisco Secure ACS for Windows Server78-16592-01b. If you need to create a pol

Seite 544

14-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC PoliciesPolicies are reusable; that is

Seite 545 - Type Definitions

1-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewAAA Server Functions and ConceptsQuotas can be either absolute

Seite 546 - Procedure

Chapter 14 Network Admission ControlNAC Policies14-18User Guide for Cisco Secure ACS for Windows Server78-16592-01About Local PoliciesLocal poli

Seite 547

14-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC PoliciesAbout Rules, Rule Elements, an

Seite 548

Chapter 14 Network Admission ControlNAC Policies14-20User Guide for Cisco Secure ACS for Windows Server78-16592-01• unsigned integer—The attribu

Seite 549 - PAP Procedure Output

14-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC PoliciesThe following are the operator

Seite 550

Chapter 14 Network Admission ControlNAC Policies14-22User Guide for Cisco Secure ACS for Windows Server78-16592-01–$ (dollar)—The $ operator mat

Seite 551

14-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC Policies• Description—Specifies a text

Seite 552 - EAP-TLS Procedure Output

Chapter 14 Network Admission ControlNAC Policies14-24User Guide for Cisco Secure ACS for Windows Server78-16592-01Note Under Default Rule, the m

Seite 553 - Result Codes

14-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC Policiesappear in the Attribute list.

Seite 554

Chapter 14 Network Admission ControlNAC Policies14-26User Guide for Cisco Secure ACS for Windows Server78-16592-01b. Click Database Configuratio

Seite 555

14-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC PoliciesTip If you want to change a ru

Seite 556

ContentsviUser Guide for Cisco Secure ACS for Windows Server78-16592-01CHAPTER 3 Interface Configuration 3-1Interface Design Concepts 3-2User-to-Grou

Seite 557

Chapter 1 OverviewAAA Server Functions and Concepts1-20User Guide for Cisco Secure ACS for Windows Server78-16592-01AAA client that uses TACACS+.

Seite 558

Chapter 14 Network Admission ControlNAC Policies14-28User Guide for Cisco Secure ACS for Windows Server78-16592-01When Cisco Secure ACS applies

Seite 559

14-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC PoliciesCisco Secure ACS evaluates a p

Seite 560

Chapter 14 Network Admission ControlNAC Policies14-30User Guide for Cisco Secure ACS for Windows Server78-16592-01ACS cannot reach the primary s

Seite 561

14-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC Policies–Password—Specifies the passwo

Seite 562 - Token Server User Databases

Chapter 14 Network Admission ControlNAC Policies14-32User Guide for Cisco Secure ACS for Windows Server78-16592-01• Forwarding Credential Types—

Seite 563 - RADIUS-Enabled Token Servers

14-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC Policiesd. Under Credential Validation

Seite 564

Chapter 14 Network Admission ControlNAC Policies14-34User Guide for Cisco Secure ACS for Windows Server78-16592-01The Select External Policies p

Seite 565

14-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC PoliciesTip If the policy you want to

Seite 566

Chapter 14 Network Admission ControlNAC Policies14-36User Guide for Cisco Secure ACS for Windows Server78-16592-01Deleting a PolicyBefore You Be

Seite 567

14-37User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 14 Network Admission ControlNAC PoliciesStep 5 Click Delete Policy.Ste

Seite 568 - RSA SecurID Token Servers

1-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewAAA Server Functions and ConceptsOther Authorization-Related F

Seite 569

Chapter 14 Network Admission ControlNAC Policies14-38User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 570

CHAPTER 15-1User Guide for Cisco Secure ACS for Windows Server78-16592-0115Unknown User PolicyAfter you have configured at least one database in the E

Seite 571

Chapter 15 Unknown User PolicyKnown, Unknown, and Discovered Users15-2User Guide for Cisco Secure ACS for Windows Server78-16592-01• Posture Val

Seite 572

15-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 15 Unknown User PolicyKnown, Unknown, and Discovered UsersCisco Secure

Seite 573 - Network Admission Control

Chapter 15 Unknown User PolicyAuthentication and Unknown Users15-4User Guide for Cisco Secure ACS for Windows Server78-16592-01–Authentication—T

Seite 574 - NAC AAA Components

15-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 15 Unknown User PolicyAuthentication and Unknown UsersThe Unknown User

Seite 575 - Posture Validation

Chapter 15 Unknown User PolicyAuthentication and Unknown Users15-6User Guide for Cisco Secure ACS for Windows Server78-16592-01Note Because user

Seite 576 - Posture Tokens

15-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 15 Unknown User PolicyAuthentication and Unknown Userswith various Wind

Seite 577

Chapter 15 Unknown User PolicyAuthentication and Unknown Users15-8User Guide for Cisco Secure ACS for Windows Server78-16592-01Note If your netw

Seite 578

15-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 15 Unknown User PolicyAuthentication and Unknown UsersAdded Authenticat

Seite 579

Chapter 1 OverviewAAA Server Functions and Concepts1-22User Guide for Cisco Secure ACS for Windows Server78-16592-01AccountingAAA clients use the

Seite 580

Chapter 15 Unknown User PolicyPosture Validation and the Unknown User Policy15-10User Guide for Cisco Secure ACS for Windows Server78-16592-01Po

Seite 581

15-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 15 Unknown User PolicyPosture Validation and the Unknown User PolicyCr

Seite 582 - NAC Databases

Chapter 15 Unknown User PolicyPosture Validation and the Unknown User Policy15-12User Guide for Cisco Secure ACS for Windows Server78-16592-01No

Seite 583

15-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 15 Unknown User PolicyAuthorization of Unknown UsersAuthorization of U

Seite 584

Chapter 15 Unknown User PolicyDatabase Search Order15-14User Guide for Cisco Secure ACS for Windows Server78-16592-01• External Databases—Of the

Seite 585 - Policy Selection Options

15-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 15 Unknown User PolicyDatabase Search Order• Posture validation—The Un

Seite 586 - Configuring a NAC Database

Chapter 15 Unknown User PolicyConfiguring the Unknown User Policy15-16User Guide for Cisco Secure ACS for Windows Server78-16592-01Tip If you cr

Seite 587

15-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 15 Unknown User PolicyDisabling Unknown User AuthenticationNote For mo

Seite 588 - NAC Policies

Chapter 15 Unknown User PolicyDisabling Unknown User Authentication15-18User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 589 - Local Policies

CHAPTER 16-1User Guide for Cisco Secure ACS for Windows Server78-16592-0116User Group Mapping and SpecificationThis chapter provides information about

Seite 590 - About Local Policies

1-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewAAA Server Functions and ConceptsAdministrationTo configure, m

Seite 591 - NAC Attribute Data Types

Chapter 16 User Group Mapping and SpecificationGroup Mapping by External User Database16-2User Guide for Cisco Secure ACS for Windows Server78-1

Seite 592 - Rule Operators

16-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 16 User Group Mapping and SpecificationGroup Mapping by External User D

Seite 593

Chapter 16 User Group Mapping and SpecificationGroup Mapping by Group Set Membership16-4User Guide for Cisco Secure ACS for Windows Server78-165

Seite 594

16-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 16 User Group Mapping and SpecificationGroup Mapping by Group Set Membe

Seite 595

Chapter 16 User Group Mapping and SpecificationGroup Mapping by Group Set Membership16-6User Guide for Cisco Secure ACS for Windows Server78-165

Seite 596 - Rule Configuration Options

16-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 16 User Group Mapping and SpecificationGroup Mapping by Group Set Membe

Seite 597 - Creating a Local Policy

Chapter 16 User Group Mapping and SpecificationGroup Mapping by Group Set Membership16-8User Guide for Cisco Secure ACS for Windows Server78-165

Seite 598

16-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 16 User Group Mapping and SpecificationGroup Mapping by Group Set Membe

Seite 599

Chapter 16 User Group Mapping and SpecificationGroup Mapping by Group Set Membership16-10User Guide for Cisco Secure ACS for Windows Server78-16

Seite 600 - External Policies

16-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 16 User Group Mapping and SpecificationGroup Mapping by Group Set Memb

Seite 601

Chapter 1 OverviewAAA Server Functions and Concepts1-24User Guide for Cisco Secure ACS for Windows Server78-16592-01For information about configu

Seite 602

Chapter 16 User Group Mapping and SpecificationGroup Mapping by Group Set Membership16-12User Guide for Cisco Secure ACS for Windows Server78-16

Seite 603

16-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 16 User Group Mapping and SpecificationNAC Group MappingThe Order mapp

Seite 604 - Creating an External Policy

Chapter 16 User Group Mapping and SpecificationRADIUS-Based Group Specification16-14User Guide for Cisco Secure ACS for Windows Server78-16592-0

Seite 605

16-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 16 User Group Mapping and SpecificationRADIUS-Based Group Specificatio

Seite 606 - Editing a Policy

Chapter 16 User Group Mapping and SpecificationRADIUS-Based Group Specification16-16User Guide for Cisco Secure ACS for Windows Server78-16592-0

Seite 607

A-1User Guide for Cisco Secure ACS for Windows Server78-16592-01APPENDIXATroubleshootingThis appendix provides information about certain basic proble

Seite 608 - Deleting a Policy

Appendix A TroubleshootingAdministration IssuesA-2User Guide for Cisco Secure ACS for Windows Server78-16592-01Administration IssuesCondition Re

Seite 609 - Step 6 Click Submit

A-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix A TroubleshootingAdministration IssuesAdministrator configured for even

Seite 610

Appendix A TroubleshootingBrowser IssuesA-4User Guide for Cisco Secure ACS for Windows Server78-16592-01Browser IssuesCondition Recovery ActionT

Seite 611 - Unknown User Policy

A-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix A TroubleshootingCisco IOS IssuesCisco IOS IssuesCondition Recovery Act

Seite 612

1-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewCisco Secure ACS HTML Interface• CSMonitor service, providing

Seite 613

Appendix A TroubleshootingCisco IOS IssuesA-6User Guide for Cisco Secure ACS for Windows Server78-16592-01Under EXEC Commands, Cisco IOS command

Seite 614

A-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix A TroubleshootingDatabase IssuesDatabase IssuesCondition Recovery Actio

Seite 615

Appendix A TroubleshootingDatabase IssuesA-8User Guide for Cisco Secure ACS for Windows Server78-16592-01External databases not operating proper

Seite 616

A-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix A TroubleshootingDatabase IssuesUnable to authenticate against the Nove

Seite 617 - \username. The

Appendix A TroubleshootingDial-in Connection IssuesA-10User Guide for Cisco Secure ACS for Windows Server78-16592-01Dial-in Connection IssuesCon

Seite 618

A-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix A TroubleshootingDial-in Connection IssuesA dial-in user cannot connec

Seite 619 - Added Authentication Latency

Appendix A TroubleshootingDial-in Connection IssuesA-12User Guide for Cisco Secure ACS for Windows Server78-16592-01A dial-in user cannot connec

Seite 620 - :username

A-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix A TroubleshootingDial-in Connection IssuesA dial-in user cannot connec

Seite 621

Appendix A TroubleshootingDebug IssuesA-14User Guide for Cisco Secure ACS for Windows Server78-16592-01Debug IssuesCondition Recovery ActionWhen

Seite 622

A-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix A TroubleshootingProxy IssuesProxy IssuesCondition Recovery ActionProx

Seite 623 - Unknown User Policy Options

Chapter 1 OverviewCisco Secure ACS HTML Interface1-26User Guide for Cisco Secure ACS for Windows Server78-16592-01This section contains the follo

Seite 624 - Database Search Order

Appendix A TroubleshootingInstallation and Upgrade IssuesA-16User Guide for Cisco Secure ACS for Windows Server78-16592-01Installation and Upgra

Seite 625

A-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix A TroubleshootingReport IssuesReport IssuesCondition Recovery ActionTh

Seite 626

Appendix A TroubleshootingReport IssuesA-18User Guide for Cisco Secure ACS for Windows Server78-16592-01The Logged in Users report works with so

Seite 627

A-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix A TroubleshootingThird-Party Server IssuesThird-Party Server IssuesCon

Seite 628

Appendix A TroubleshootingUser Authentication IssuesA-20User Guide for Cisco Secure ACS for Windows Server78-16592-01User Authentication IssuesC

Seite 629 - Specification

A-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix A TroubleshootingUser Authentication IssuesAuthentication fails; the e

Seite 630

Appendix A TroubleshootingTACACS+ and RADIUS Attribute IssuesA-22User Guide for Cisco Secure ACS for Windows Server78-16592-01TACACS+ and RADIUS

Seite 631

B-1User Guide for Cisco Secure ACS for Windows Server78-16592-01APPENDIXBTACACS+ Attribute-Value PairsCisco Secure Access Control Server (ACS) for Wi

Seite 632 - • Generic LDAP

Appendix B TACACS+ Attribute-Value PairsCisco IOS AV Pair DictionaryB-2User Guide for Cisco Secure ACS for Windows Server78-16592-01TACACS+ AV P

Seite 633 - Group Mapping Order

B-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix B TACACS+ Attribute-Value PairsCisco IOS AV Pair Dictionary• ip-address

Seite 634

1-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewCisco Secure ACS HTML InterfaceAdministrative sessions timeout

Seite 635

Appendix B TACACS+ Attribute-Value PairsCisco IOS AV Pair DictionaryB-4User Guide for Cisco Secure ACS for Windows Server78-16592-01• wins-serve

Seite 636

B-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix B TACACS+ Attribute-Value PairsCisco IOS AV Pair Dictionary• protocol•

Seite 637

Appendix B TACACS+ Attribute-Value PairsCisco IOS AV Pair DictionaryB-6User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 638

C-1User Guide for Cisco Secure ACS for Windows Server78-16592-01APPENDIXCRADIUS AttributesCisco Secure Access Control Server (ACS) for Windows Server

Seite 639

Appendix C RADIUS AttributesCisco IOS Dictionary of RADIUS AV PairsC-2User Guide for Cisco Secure ACS for Windows Server78-16592-013. In the pro

Seite 640

C-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesCisco IOS Dictionary of RADIUS AV PairsNote If you s

Seite 641 - NAC Group Mapping

Appendix C RADIUS AttributesCisco IOS Dictionary of RADIUS AV PairsC-4User Guide for Cisco Secure ACS for Windows Server78-16592-0113 Framed-Com

Seite 642

C-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesCisco IOS/PIX Dictionary of RADIUS VSAsCisco IOS/PIX

Seite 643

Appendix C RADIUS AttributesCisco IOS/PIX Dictionary of RADIUS VSAsC-6User Guide for Cisco Secure ACS for Windows Server78-16592-0124 cisco-h323

Seite 644

C-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesAbout the cisco-av-pair RADUIS AttributeAbout the ci

Seite 645 - Troubleshooting

Chapter 1 OverviewCisco Secure ACS HTML Interface1-28User Guide for Cisco Secure ACS for Windows Server78-16592-01advanced features such as datab

Seite 646 - Administration Issues

Appendix C RADIUS AttributesAbout the cisco-av-pair RADUIS AttributeC-8User Guide for Cisco Secure ACS for Windows Server78-16592-01In IOS, supp

Seite 647

C-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesCisco VPN 3000 Concentrator Dictionary of RADIUS VSA

Seite 648 - Browser Issues

Appendix C RADIUS AttributesCisco VPN 3000 Concentrator Dictionary of RADIUS VSAsC-10User Guide for Cisco Secure ACS for Windows Server78-16592-

Seite 649 - Cisco IOS Issues

C-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesCisco VPN 3000 Concentrator Dictionary of RADIUS VS

Seite 650

Appendix C RADIUS AttributesCisco VPN 3000 Concentrator Dictionary of RADIUS VSAsC-12User Guide for Cisco Secure ACS for Windows Server78-16592-

Seite 651 - Database Issues

C-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesCisco VPN 5000 Concentrator Dictionary of RADIUS VS

Seite 652

Appendix C RADIUS AttributesCisco Building Broadband Service Manager Dictionary of RADIUS VSAC-14User Guide for Cisco Secure ACS for Windows Ser

Seite 653

C-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV Pairs5 NAS-Port Physic

Seite 654 - Dial-in Connection Issues

Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV PairsC-16User Guide for Cisco Secure ACS for Windows Server78-16592-016 Service-Type Ty

Seite 655

C-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV Pairs10 Framed-Routing

Seite 656

1-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewCisco Secure ACS HTML Interface–Online Help—Displays basic hel

Seite 657

Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV PairsC-18User Guide for Cisco Secure ACS for Windows Server78-16592-0115 Login-Service

Seite 658 - Debug Issues

C-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV Pairs24 State Allows S

Seite 659 - Proxy Issues

Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV PairsC-20User Guide for Cisco Secure ACS for Windows Server78-16592-0128 Idle-Timeout M

Seite 660 - MaxSessions Issues

C-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV Pairs34 Login-LAT-Serv

Seite 661 - Report Issues

Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV PairsC-22User Guide for Cisco Secure ACS for Windows Server78-16592-0144 Acct-Session-I

Seite 662

C-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV Pairs49 Acct-Terminate

Seite 663 - Third-Party Server Issues

Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV PairsC-24User Guide for Cisco Secure ACS for Windows Server78-16592-0152 Acct-Input-Gig

Seite 664 - User Authentication Issues

C-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV Pairs66 Tunnel-Client-

Seite 665 - • If you have RADIUS/TACACS

Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV PairsC-26User Guide for Cisco Secure ACS for Windows Server78-16592-0181 Tunnel-Private

Seite 666 - Note Some attributes are not

C-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesIETF Dictionary of RADIUS AV Pairs193 Pre-Output-Pa

Seite 667 - TACACS+ Attribute-Value Pairs

viiUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsAAA Client Configuration 4-11AAA Client Configuration Options 4-11Adding a AA

Seite 668 - TACACS+ AV Pairs

Chapter 1 OverviewCisco Secure ACS HTML Interface1-30User Guide for Cisco Secure ACS for Windows Server78-16592-01If SSL is enabled and you do no

Seite 669 - Cisco IOS AV Pair Dictionary

Appendix C RADIUS AttributesMicrosoft MPPE Dictionary of RADIUS VSAsC-28User Guide for Cisco Secure ACS for Windows Server78-16592-01Microsoft M

Seite 670 - TACACS+ Accounting AV Pairs

C-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesMicrosoft MPPE Dictionary of RADIUS VSAs5MS-CHAP-LM

Seite 671

Appendix C RADIUS AttributesMicrosoft MPPE Dictionary of RADIUS VSAsC-30User Guide for Cisco Secure ACS for Windows Server78-16592-0112 MS-CHAP-

Seite 672

C-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV PairsAscend Dictiona

Seite 673

Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV PairsC-32User Guide for Cisco Secure ACS for Windows Server78-16592-016 Service-Type

Seite 674

C-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV Pairs44 Acct-Session

Seite 675

Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV PairsC-34User Guide for Cisco Secure ACS for Windows Server78-16592-01112 Ascend-CBCP

Seite 676

C-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV Pairs128 Ascend-Shar

Seite 677

Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV PairsC-36User Guide for Cisco Secure ACS for Windows Server78-16592-01145 Ascend-Assi

Seite 678

C-37User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV PairsFrame Datalink

Seite 679

1-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewCisco Secure ACS HTML InterfaceAlso, IP filtering of proxied a

Seite 680

Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV PairsC-38User Guide for Cisco Secure ACS for Windows Server78-16592-01170 Ascend-TS-I

Seite 681

C-39User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV Pairs185 Ascend-Home

Seite 682

Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV PairsC-40User Guide for Cisco Secure ACS for Windows Server78-16592-01205 Ascend-Menu

Seite 683

C-41User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV Pairs221 Ascend-FR-D

Seite 684

Appendix C RADIUS AttributesAscend Dictionary of RADIUS AV PairsC-42User Guide for Cisco Secure ACS for Windows Server78-16592-01238 Ascend-Seco

Seite 685

C-43User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix C RADIUS AttributesNortel Dictionary of RADIUS VSAsNortel Dictionary o

Seite 686 - Dictionary of RADIUS VSA

Appendix C RADIUS AttributesJuniper Dictionary of RADIUS VSAsC-44User Guide for Cisco Secure ACS for Windows Server78-16592-01Juniper Dictionary

Seite 687

D-1User Guide for Cisco Secure ACS for Windows Server78-16592-01APPENDIXDCSUtil Database UtilityThis appendix details the Cisco Secure Access Control

Seite 688

Appendix D CSUtil Database UtilityLocation of CSUtil.exe and Related FilesD-2User Guide for Cisco Secure ACS for Windows Server78-16592-01• Expo

Seite 689

D-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityCSUtil.exe OptionsNote Most CSUtil.exe options

Seite 690

Chapter 1 OverviewCisco Secure ACS HTML Interface1-32User Guide for Cisco Secure ACS for Windows Server78-16592-01If Cisco Secure ACS is behind a

Seite 691

Appendix D CSUtil Database UtilityCSUtil.exe OptionsD-4User Guide for Cisco Secure ACS for Windows Server78-16592-01• -i—Import user or AAA clie

Seite 692

D-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityDisplaying Command-Line Syntax• -listUDV—List

Seite 693

Appendix D CSUtil Database UtilityBacking Up Cisco Secure ACS with CSUtil.exeD-6User Guide for Cisco Secure ACS for Windows Server78-16592-01Bac

Seite 694

D-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityRestoring Cisco Secure ACS with CSUtil.exeRest

Seite 695

Appendix D CSUtil Database UtilityCreating a CiscoSecure User DatabaseD-8User Guide for Cisco Secure ACS for Windows Server78-16592-01• To resto

Seite 696

D-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityCreating a CiscoSecure User DatabaseTo create

Seite 697

Appendix D CSUtil Database UtilityCreating a Cisco Secure ACS Database Dump FileD-10User Guide for Cisco Secure ACS for Windows Server78-16592-0

Seite 698

D-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityLoading the Cisco Secure ACS Database from a

Seite 699

Appendix D CSUtil Database UtilityCompacting the CiscoSecure User DatabaseD-12User Guide for Cisco Secure ACS for Windows Server78-16592-01Step

Seite 700 - • Ascend

D-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityCompacting the CiscoSecure User DatabaseCompa

Seite 701

1-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewCisco Secure ACS HTML InterfaceStep 2 In the Address or Locati

Seite 702 - Note The MS-CHAP-MPPE-Keys

Appendix D CSUtil Database UtilityUser and AAA Client Import OptionD-14User Guide for Cisco Secure ACS for Windows Server78-16592-01If you do no

Seite 703

D-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityUser and AAA Client Import OptionImporting Us

Seite 704

Appendix D CSUtil Database UtilityUser and AAA Client Import OptionD-16User Guide for Cisco Secure ACS for Windows Server78-16592-01b. To start

Seite 705

D-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityUser and AAA Client Import OptionAbout User a

Seite 706

Appendix D CSUtil Database UtilityUser and AAA Client Import OptionD-18User Guide for Cisco Secure ACS for Windows Server78-16592-01ADD Statemen

Seite 707

D-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityUser and AAA Client Import OptionFor example,

Seite 708

Appendix D CSUtil Database UtilityUser and AAA Client Import OptionD-20User Guide for Cisco Secure ACS for Windows Server78-16592-01Table D-3 UP

Seite 709

D-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityUser and AAA Client Import OptionFor example,

Seite 710

Appendix D CSUtil Database UtilityUser and AAA Client Import OptionD-22User Guide for Cisco Secure ACS for Windows Server78-16592-01Table D-5 AD

Seite 711

D-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityUser and AAA Client Import OptionFor example,

Seite 712

Chapter 1 OverviewCisco Secure ACS HTML Interface1-34User Guide for Cisco Secure ACS for Windows Server78-16592-01Using Online HelpOnline help is

Seite 713

Appendix D CSUtil Database UtilityExporting User List to a Text FileD-24User Guide for Cisco Secure ACS for Windows Server78-16592-01Import File

Seite 714

D-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityExporting Group Information to a Text FileSte

Seite 715 - Table C-9 Nortel RADIUS VSAs

Appendix D CSUtil Database UtilityExporting Registry Information to a Text FileD-26User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 716

D-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityDecoding Error NumbersCSUtil.exe exports Wind

Seite 717 - CSUtil Database Utility

Appendix D CSUtil Database UtilityRecalculating CRC ValuesD-28User Guide for Cisco Secure ACS for Windows Server78-16592-01Step 2 Type:CSUtil.ex

Seite 718 - CSUtil.exe Syntax

D-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityUser-Defined RADIUS Vendors and VSA SetsAbout

Seite 719 - CSUtil.exe Options

Appendix D CSUtil Database UtilityUser-Defined RADIUS Vendors and VSA SetsD-30User Guide for Cisco Secure ACS for Windows Server78-16592-01Befor

Seite 720

D-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityUser-Defined RADIUS Vendors and VSA SetsNote

Seite 721 - CSUtil.exe -x

Appendix D CSUtil Database UtilityUser-Defined RADIUS Vendors and VSA SetsD-32User Guide for Cisco Secure ACS for Windows Server78-16592-01Step

Seite 722 - Step 2 Type:

D-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityUser-Defined RADIUS Vendors and VSA SetsStep

Seite 723

1-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 1 OverviewCisco Secure ACS HTML InterfaceTo access online documentation,

Seite 724 - CSUtil.exe -r config filename

Appendix D CSUtil Database UtilityUser-Defined RADIUS Vendors and VSA SetsD-34User Guide for Cisco Secure ACS for Windows Server78-16592-01Step

Seite 725

D-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityUser-Defined RADIUS Vendors and VSA SetsVendo

Seite 726 - Step 3 Type:

Appendix D CSUtil Database UtilityUser-Defined RADIUS Vendors and VSA SetsD-36User Guide for Cisco Secure ACS for Windows Server78-16592-01For e

Seite 727 - Dump File

D-37User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityUser-Defined RADIUS Vendors and VSA SetsTable

Seite 728

Appendix D CSUtil Database UtilityUser-Defined RADIUS Vendors and VSA SetsD-38User Guide for Cisco Secure ACS for Windows Server78-16592-01For e

Seite 729

D-39User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityUser-Defined RADIUS Vendors and VSA SetsFor e

Seite 730

Appendix D CSUtil Database UtilityPAC File GenerationD-40User Guide for Cisco Secure ACS for Windows Server78-16592-01VSA 2=widget-admin-interfa

Seite 731

D-41User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPAC File GenerationPAC File Options and Examp

Seite 732

Appendix D CSUtil Database UtilityPAC File GenerationD-42User Guide for Cisco Secure ACS for Windows Server78-16592-01–-f list—CSUtil.exe genera

Seite 733 - ONLINE or OFFLINE Statement

D-43User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPAC File GenerationGenerating PAC FilesNote I

Seite 734 - ADD Statements

Chapter 1 OverviewCisco Secure ACS HTML Interface1-36User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 735 - UPDATE Statements

Appendix D CSUtil Database UtilityPosture Validation AttributesD-44User Guide for Cisco Secure ACS for Windows Server78-16592-01If you specified

Seite 736

D-45User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPosture Validation AttributesExample D-1 show

Seite 737 - ADD_NAS Statements

Appendix D CSUtil Database UtilityPosture Validation AttributesD-46User Guide for Cisco Secure ACS for Windows Server78-16592-01Vendor IDs have

Seite 738

D-47User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPosture Validation Attributes• attribute-name

Seite 739 - DEL_NAS Statements

Appendix D CSUtil Database UtilityPosture Validation AttributesD-48User Guide for Cisco Secure ACS for Windows Server78-16592-01–date–version–oc

Seite 740 - Import File Example

D-49User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPosture Validation Attributes• To preserve th

Seite 741

Appendix D CSUtil Database UtilityPosture Validation AttributesD-50User Guide for Cisco Secure ACS for Windows Server78-16592-01Tip When you spe

Seite 742

D-51User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPosture Validation AttributesDeleting a Postu

Seite 743 - Decoding Error Numbers

Appendix D CSUtil Database UtilityPosture Validation AttributesD-52User Guide for Cisco Secure ACS for Windows Server78-16592-01CSUtil v3.3, Cop

Seite 744 - Recalculating CRC Values

D-53User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPosture Validation Attributesattribute-name=A

Seite 745

CHAPTER 2-1User Guide for Cisco Secure ACS for Windows Server78-16592-012Deployment ConsiderationsDeployment of Cisco Secure ACS for Windows Server ca

Seite 746

Appendix D CSUtil Database UtilityPosture Validation AttributesD-54User Guide for Cisco Secure ACS for Windows Server78-16592-01application-name

Seite 747

D-55User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPosture Validation Attributesvendor-name=Cisc

Seite 748 - Listing Custom RADIUS Vendors

Appendix D CSUtil Database UtilityPosture Validation AttributesD-56User Guide for Cisco Secure ACS for Windows Server78-16592-01[attr#15]vendor-

Seite 749

D-57User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPosture Validation Attributesattribute-type=u

Seite 750 - RADIUS Vendor/VSA Import File

Appendix D CSUtil Database UtilityPosture Validation AttributesD-58User Guide for Cisco Secure ACS for Windows Server78-16592-01attribute-name=S

Seite 751 - Vendor and VSA Set Definition

D-59User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPosture Validation Attributesapplication-name

Seite 752 - Attribute Definition

Appendix D CSUtil Database UtilityPosture Validation AttributesD-60User Guide for Cisco Secure ACS for Windows Server78-16592-01vendor-name=NAIa

Seite 753

D-61User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPosture Validation Attributes[attr#39]vendor-

Seite 754 - Enumeration Definition

Appendix D CSUtil Database UtilityPosture Validation AttributesD-62User Guide for Cisco Secure ACS for Windows Server78-16592-01attribute-type=v

Seite 755

D-63User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix D CSUtil Database UtilityPosture Validation Attributesattribute-name=A

Seite 756 - PAC File Generation

Chapter 2 Deployment ConsiderationsBasic Deployment Requirements for Cisco Secure ACS2-2User Guide for Cisco Secure ACS for Windows Server78-165

Seite 757 - PAC File Options and Examples

Appendix D CSUtil Database UtilityPosture Validation AttributesD-64User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 758

E-1User Guide for Cisco Secure ACS for Windows Server78-16592-01APPENDIXEVPDN ProcessingCisco Secure ACS for Windows Server supports authentication f

Seite 759 - Generating PAC Files

Appendix E VPDN ProcessingVPDN ProcessE-2User Guide for Cisco Secure ACS for Windows Server78-16592-01Figure E-1 VPDN User Dials In2. If VPDN is

Seite 760 - Posture Validation Attributes

E-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix E VPDN ProcessingVPDN ProcessFigure E-3 Authorization of Domain FailsIf

Seite 761

Appendix E VPDN ProcessingVPDN ProcessE-4User Guide for Cisco Secure ACS for Windows Server78-16592-01Figure E-5 HG Authenticates Tunnel with AC

Seite 762

E-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix E VPDN ProcessingVPDN ProcessFigure E-7 NAS Authenticates Tunnel with A

Seite 763

Appendix E VPDN ProcessingVPDN ProcessE-6User Guide for Cisco Secure ACS for Windows Server78-16592-01Figure E-9 HG Uses ACS to Authenticate Use

Seite 764

F-1User Guide for Cisco Secure ACS for Windows Server78-16592-01APPENDIXFRDBMS Synchronization Import DefinitionsRDBMS synchronization import definit

Seite 765 - CSUtil.exe -addavp filename

Appendix F RDBMS Synchronization Import DefinitionsaccountActions SpecificationF-2User Guide for Cisco Secure ACS for Windows Server78-16592-01a

Seite 766

F-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsaccountActions Specificationa

Seite 767 - CSUtil.exe -delavp vendor-ID

2-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 2 Deployment ConsiderationsBasic Deployment Requirements for Cisco Secur

Seite 768

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-4User Guide for Cisco Secure ACS for Windows Server78-16592-01accountActions Pr

Seite 769

F-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction CodesIf an action can

Seite 770

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-6User Guide for Cisco Secure ACS for Windows Server78-16592-01Table F-2 Action

Seite 771

F-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction CodesAction Codes for

Seite 772

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-8User Guide for Cisco Secure ACS for Windows Server78-16592-01105 SET_T+_ENABLE

Seite 773

F-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction Codes108 SET_PASS_TYPE

Seite 774

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-10User Guide for Cisco Secure ACS for Windows Server78-16592-01110 ADD_PASS_STA

Seite 775

F-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction Codes115 SET_MAX_SESS

Seite 776

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-12User Guide for Cisco Secure ACS for Windows Server78-16592-01261 DISABLE_QUOT

Seite 777

F-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction Codes270 SET_DCS_TYPE

Seite 778

ContentsviiiUser Guide for Cisco Secure ACS for Windows Server78-16592-01Deleting a Network Access Filter 5-7Downloadable IP ACLs 5-7About Downloadab

Seite 779

Chapter 2 Deployment ConsiderationsBasic Deployment Requirements for Cisco Secure ACS2-4User Guide for Cisco Secure ACS for Windows Server78-165

Seite 780

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-14User Guide for Cisco Secure ACS for Windows Server78-16592-01Action Codes for

Seite 781 - VPDN Processing

F-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction CodesTransactions usi

Seite 782 - VPDN Process

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-16User Guide for Cisco Secure ACS for Windows Server78-16592-01123 ADD_DIAL_ACC

Seite 783

F-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction Codes140 SET_TODDOW_A

Seite 784

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-18User Guide for Cisco Secure ACS for Windows Server78-16592-01150 SET_STATIC_I

Seite 785

F-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction CodesAction Codes for

Seite 786 - Figure E-10

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-20User Guide for Cisco Secure ACS for Windows Server78-16592-01163 ADD_RADIUS_

Seite 787 - Definitions

F-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction Codes170 ADD_TACACS_S

Seite 788

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-22User Guide for Cisco Secure ACS for Windows Server78-16592-01172 ADD_TACACS_A

Seite 789

F-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction Codes174 ADD_IOS_COMM

Seite 790 - Action Codes

2-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 2 Deployment ConsiderationsBasic Deployment Requirements for Cisco Secur

Seite 791

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-24User Guide for Cisco Secure ACS for Windows Server78-16592-01176 ADD_IOS_COMM

Seite 792

F-25User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction CodesAction Codes for

Seite 793

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-26User Guide for Cisco Secure ACS for Windows Server78-16592-01Table F-6 Action

Seite 794

F-27User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction Codes221 SET_NAS_FLAG

Seite 795

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-28User Guide for Cisco Secure ACS for Windows Server78-16592-01233 SET_AAA_TRAF

Seite 796

F-29User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction Codes250 ADD_NDG VN C

Seite 797

Appendix F RDBMS Synchronization Import DefinitionsAction CodesF-30User Guide for Cisco Secure ACS for Windows Server78-16592-01351 DEL_UDV V1 R

Seite 798

F-31User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAction Codes353 SET_VSA_PROF

Seite 799 - PIX Shell (pixshell)

Appendix F RDBMS Synchronization Import DefinitionsCisco Secure ACS Attributes and Action CodesF-32User Guide for Cisco Secure ACS for Windows S

Seite 800

F-33User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsCisco Secure ACS Attributes

Seite 801 - NAS01,tty0,0898-69696969

Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure ACS2-6User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 802

Appendix F RDBMS Synchronization Import DefinitionsCisco Secure ACS Attributes and Action CodesF-34User Guide for Cisco Secure ACS for Windows S

Seite 803

F-35User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsCisco Secure ACS Attributes

Seite 804

Appendix F RDBMS Synchronization Import DefinitionsAn Example of accountActionsF-36User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 805 - User Settings

F-37User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix F RDBMS Synchronization Import DefinitionsAn Example of accountActions

Seite 806

Appendix F RDBMS Synchronization Import DefinitionsAn Example of accountActionsF-38User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 807

G-1User Guide for Cisco Secure ACS for Windows Server78-16592-01APPENDIXGInternal ArchitectureThis chapter describes the Cisco Secure ACS for Windows

Seite 808

Appendix G Internal ArchitectureWindows RegistryG-2User Guide for Cisco Secure ACS for Windows Server78-16592-01• CSMon• CSTacacs• CSRadiusYou c

Seite 809

G-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix G Internal ArchitectureCSAuthin the HTTP Port Allocation feature, you s

Seite 810

Appendix G Internal ArchitectureCSDBSyncG-4User Guide for Cisco Secure ACS for Windows Server78-16592-01password-aging information. The authoriz

Seite 811

G-5User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix G Internal ArchitectureCSMonNote CSMon is not intended as a replacement

Seite 812

2-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure ACS

Seite 813

Appendix G Internal ArchitectureCSMonG-6User Guide for Cisco Secure ACS for Windows Server78-16592-01build up a “picture” of expected response t

Seite 814

G-7User Guide for Cisco Secure ACS for Windows Server78-16592-01Appendix G Internal ArchitectureCSMonNotificationCSMon can be configured to noti

Seite 815

Appendix G Internal ArchitectureCSTacacs and CSRadiusG-8User Guide for Cisco Secure ACS for Windows Server78-16592-01If the event is a warning e

Seite 816

IN-1User Guide for Cisco Secure ACS for Windows Server78-16592-01INDEXAAAASee also AAA clientsSee also AAA serversdefinition1-2pools for IP address a

Seite 817

IndexIN-2User Guide for Cisco Secure ACS for Windows Server78-16592-01accountingSee also loggingoverview1-22ACLsSee downloadable IP ACLsaction codesf

Seite 818 - User-Specific Attributes

IN-3User Guide for Cisco Secure ACS for Windows Server78-16592-01Indexprotocol supported 1-11Architecture G-1ASCII/PAPcompatible databases1-10protoco

Seite 819

IndexIN-4User Guide for Cisco Secure ACS for Windows Server78-16592-01browsersSee also HTML interfacetroubleshootingA-4Ccached usersSee discovered us

Seite 820 - User-Defined Attributes

IN-5User Guide for Cisco Secure ACS for Windows Server78-16592-01IndexCisco Secure ACS backupsSee backupsCisco Secure ACS system restoreSee restoreCi

Seite 821 - Group-Specific Attributes

IndexIN-6User Guide for Cisco Secure ACS for Windows Server78-16592-01displaying syntax D-5import text file (example) D-24overview D-1CSV (comma-sepa

Seite 822 - An Example of accountActions

IN-7User Guide for Cisco Secure ACS for Windows Server78-16592-01IndexSee RADIUS user databasesSee RSA user databasesunknown users15-1user databases

Seite 823

Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure ACS2-8User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 824

IndexIN-8User Guide for Cisco Secure ACS for Windows Server78-16592-01Domain Listconfiguring13-30inadvertent user lockouts 13-14, 13-27overview 13-13

Seite 825 - Internal Architecture

IN-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Indexenable password options for TACACS+ 7-35enable privilege options for groups 6-1

Seite 826 - Windows Registry

IndexIN-10User Guide for Cisco Secure ACS for Windows Server78-16592-01supported protocols 1-10Global Authentication Setup 10-33grant dial-in permiss

Seite 827

IN-11User Guide for Cisco Secure ACS for Windows Server78-16592-01IndexHelp 1-29host system state G-5HTML interfaceSee also Interface Configurationen

Seite 828 - CSDBSync

IndexIN-12User Guide for Cisco Secure ACS for Windows Server78-16592-01LDAPSee generic LDAP user databasesLEAP proxy RADIUS user databasesconfiguring

Seite 829 - Monitoring

IN-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Indexloginsgreeting upon6-24password aging dependency 6-23logsSee loggingSee Report

Seite 830 - Recording

IndexIN-14User Guide for Cisco Secure ACS for Windows Server78-16592-01definition of 14-10group mapping 16-13implementing 14-5introduction 1-25loggin

Seite 831 - Response

IN-15User Guide for Cisco Secure ACS for Windows Server78-16592-01IndexNetwork Admission ControlSee NACnetwork configuration4-1network device groupsa

Seite 832 - CSTacacs and CSRadius

IndexIN-16User Guide for Cisco Secure ACS for Windows Server78-16592-01EAP-TLS 13-68PAP 13-65vs. group mappings 16-3PAP authentication sample procedu

Seite 833

IN-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Indexoutbound passwords 1-15separate passwords 1-14single password 1-14token cachin

Seite 834

2-9User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure ACS

Seite 835

IndexIN-18User Guide for Cisco Secure ACS for Windows Server78-16592-01PPP password aging 6-21privilegesSee administratorsprocessor utilizationG-5pro

Seite 836

IN-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Indextoken servers 13-79troubleshooting A-22tunneling packets 4-18vs. TACACS+ 1-6RA

Seite 837

IndexIN-20User Guide for Cisco Secure ACS for Windows Server78-16592-01in User Setup 7-49supported attributes C-43overview C-1user-definedabout9-28,

Seite 838

IN-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Indexexternal user databases 9-2frequency 9-7group mappings 9-2immediate 9-19implem

Seite 839

IndexIN-22User Guide for Cisco Secure ACS for Windows Server78-16592-01Ssearch order of external user databases 15-15security policies 2-15security p

Seite 840

IN-23User Guide for Cisco Secure ACS for Windows Server78-16592-01Indexoutput values 13-66result codes 13-69EAP-TLS authenticationconfiguring13-74inp

Seite 841

IndexIN-24User Guide for Cisco Secure ACS for Windows Server78-16592-01time-of-day access 3-8troubleshooting A-22vs. RADIUS 1-6TACACS+ Accounting log

Seite 842

IN-25User Guide for Cisco Secure ACS for Windows Server78-16592-01IndexRADIUS issues A-22report issues A-17TACACS+ issues A-22third-party server issu

Seite 843

IndexIN-26User Guide for Cisco Secure ACS for Windows Server78-16592-01callback options 7-9configuring 7-2configuring device management command autho

Seite 844

IN-27User Guide for Cisco Secure ACS for Windows Server78-16592-01IndexODBC 11-23CSV (comma-separated values) file directory11-16enablingODBC11-23VPD

Seite 845

Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure ACS2-10User Guide for Cisco Secure ACS for Windows Server78-16592-0

Seite 846

IndexIN-28User Guide for Cisco Secure ACS for Windows Server78-16592-01passwords 1-11rejection mode 15-6request handling 15-6trust relationships 13-9

Seite 847

2-11User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure AC

Seite 848

Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure ACS2-12User Guide for Cisco Secure ACS for Windows Server78-16592-0

Seite 849

2-13User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure AC

Seite 850

ixUser Guide for Cisco Secure ACS for Windows Server78-16592-01ContentsBasic User Group Settings 6-3Group Disablement 6-4Enabling VoIP Support for a

Seite 851

Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure ACS2-14User Guide for Cisco Secure ACS for Windows Server78-16592-0

Seite 852

2-15User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure AC

Seite 853

Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure ACS2-16User Guide for Cisco Secure ACS for Windows Server78-16592-0

Seite 854

2-17User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure AC

Seite 855

Chapter 2 Deployment ConsiderationsBasic Deployment Factors for Cisco Secure ACS2-18User Guide for Cisco Secure ACS for Windows Server78-16592-0

Seite 856

2-19User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 2 Deployment ConsiderationsSuggested Deployment SequenceNetwork Latency

Seite 857

Chapter 2 Deployment ConsiderationsSuggested Deployment Sequence2-20User Guide for Cisco Secure ACS for Windows Server78-16592-01For more inform

Seite 858

2-21User Guide for Cisco Secure ACS for Windows Server78-16592-01Chapter 2 Deployment ConsiderationsSuggested Deployment SequenceAlong with the

Seite 859

Chapter 2 Deployment ConsiderationsSuggested Deployment Sequence2-22User Guide for Cisco Secure ACS for Windows Server78-16592-01

Seite 860

CHAPTER 3-1User Guide for Cisco Secure ACS for Windows Server78-16592-013Interface ConfigurationEase of use is the overriding design principle of the

Kommentare zu diesen Handbüchern

Keine Kommentare