Manuel d’utilisation Cisco Systems OL-12180-01

24 pages 0.39 mb
Télécharger

Aller à la page of 24

Summary
  • Cisco Systems OL-12180-01 - page 1

    CHAPTER 12-1 ASDM User Guide OL-12180-01 12 Configuring AAA Servers and User Accounts This chapter describes support for AAA ( pronounced “triple A”) and ho w to conf igure AAA servers and the local database. This chapter contains the following sections: • AAA Overvie w , page 12-1 • AAA Server and Local Database Support, page 12-2 • Conf ...

  • Cisco Systems OL-12180-01 - page 2

    12-2 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts AAA Server and Local Database Support • All administrativ e connections to the security appliance including the following sessions: – T elnet – SSH – Serial console – ASDM (using HTTPS) – VPN management access • The enable command • Network access ...

  • Cisco Systems OL-12180-01 - page 3

    12-3 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts AAA Server and Local Database Support • RADIUS Server Support, page 12-3 • T ACA CS+ Server Support, page 12-4 • SDI Server Support, page 12-4 • NT Server Support, page 12-5 • Kerberos Serv er Support, page 12-5 • LD AP Server Support, page 12-5 • SS ...

  • Cisco Systems OL-12180-01 - page 4

    12-4 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts AAA Server and Local Database Support This section contains the following topics: • Authentication Methods, page 12-4 • Attribute Support, page 12-4 • RADIUS Authorization Functions, page 12-4 Authentication Methods The security appliance supports the follow ...

  • Cisco Systems OL-12180-01 - page 5

    12-5 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts AAA Server and Local Database Support • T wo-step Authentication Process, page 12-5 • SDI Primary and Replica Servers, page 12-5 SDI Version Support The security appliance supports SDI V ersion 5.0 and 6.0. SDI uses the concepts of an SDI primary and SDI repli ...

  • Cisco Systems OL-12180-01 - page 6

    12-6 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts AAA Server and Local Database Support LDAP Server Support This section describes using an LD AP directory with the security appliance for user authentication and VPN authorization. During authentication, the security appliance acts as a client proxy to the LD AP s ...

  • Cisco Systems OL-12180-01 - page 7

    12-7 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Configuring the Local Database User Profiles User prof iles contain, at a minimum, a username. T ypically , a password is assigned to each username, although passwords are optional. Y ou can add other information to a specif ic user prof ile. The information you c ...

  • Cisco Systems OL-12180-01 - page 8

    12-8 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Configuring the Local Database User Accounts The User Accounts pane lets you manage the local user database. The local database is used for the following features: • ASDM per-user access By default, you can log into ASDM with a blank username and the enable pass ...

  • Cisco Systems OL-12180-01 - page 9

    12-9 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Configuring the Local Database • VPN Group Lock—Specif ies what, if any , group lock policy is in effect for this user . Not av ailable in multimode. • Add—Displays the Add User Account dialog box. • Edit—Displays the Edit User Account dialog box. • ...

  • Cisco Systems OL-12180-01 - page 10

    12-10 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Configuring the Local Database Pri vilege Le vel—Selects the privile ge level for this user to use with local command authorization. The range is 0 (lowest) to 15 (highest). See the “Conf iguring Local Command Authorization” section on page 13-31 for more i ...

  • Cisco Systems OL-12180-01 - page 11

    12-11 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Configuring the Local Database L2TP ov er IPSec—Allows remote users with VPN clients provided with se veral common PC and mobile PC operating systems to establish secure connections ov er the public IP network to the security appliance and priv ate corporate ne ...

  • Cisco Systems OL-12180-01 - page 12

    12-12 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Identifying AAA Server Groups and Servers – Subnet Mask list—Specif ies the subnet mask for the Dedicated IP address. Check the Group Lock check box to restrict users to remote access through this group only . Group Lock restricts users by checking if the gro ...

  • Cisco Systems OL-12180-01 - page 13

    12-13 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Identifying AAA Server Groups and Servers If AAA accounting is in ef fect, the accounting information goes only to the activ e server , unless you have conf igured simultaneous accounting. For an o verview of AAA services, see the “ AAA Overvie w” section on ...

  • Cisco Systems OL-12180-01 - page 14

    12-14 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Identifying AAA Server Groups and Servers • Delete—Remov es the selected AAA server from the list. • Mov e up—Moves the selected AAA server up in the AAA sequence. • Mov e down—Mov es the selected AAA server back in the AAA sequence. • T est—Displ ...

  • Cisco Systems OL-12180-01 - page 15

    12-15 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Identifying AAA Server Groups and Servers Modes The following table sho ws the modes in which this feature is av ailable: Edit AAA Local Server Group The Edit AAA Local Server Group dialog box lets you specify whether to enable local user lock out and the maximum ...

  • Cisco Systems OL-12180-01 - page 16

    12-16 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Identifying AAA Server Groups and Servers • Server Name or IP Address—Specif ies the name or IP address of the AAA server . • T imeout—Specif ies the timeout interval, in seconds. This is the time after which the security appliance gi ves up on the reques ...

  • Cisco Systems OL-12180-01 - page 17

    12-17 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Identifying AAA Server Groups and Servers If you choose Detect Automatically , the security appliance attempts to determine the type of netmask expression used. If it detects a wildcard netmask e xpression, it conv erts it to a standard netmask expression; ho wev ...

  • Cisco Systems OL-12180-01 - page 18

    12-18 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Identifying AAA Server Groups and Servers – Naming Attribute(s)—Specif ies the Relativ e Distinguished Name attribute (or attributes) that uniquely identif ies an entry on the LD AP server . Common naming attributes are Common Name (cn) and User ID (uid). – ...

  • Cisco Systems OL-12180-01 - page 19

    12-19 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Identifying AAA Server Groups and Servers – Start URL—Specif ies the complete URL of the authenticating web server location where a pre-login cookie can be retriev ed. This parameter must be conf igured only when the authenticating web server loads a pre-logi ...

  • Cisco Systems OL-12180-01 - page 20

    12-20 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Configuring an Authentication Prompt Ti p Checking for basic network connecti vity to the AAA server may sav e you time in troubleshooting. T o test basic connecti vity , click T ools > Ping. Fields • AAA Server Group— Display only . Shows the AAA serv er ...

  • Cisco Systems OL-12180-01 - page 21

    12-21 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Configuring an LDAP Attribute Map Note Microsoft Internet Explorer displays up to 37 characters in an authentication prompt. Netscape Navigator displays up to 120 characters, and T elnet and FTP display up to 235 characters in an authentication prompt. Fields • ...

  • Cisco Systems OL-12180-01 - page 22

    12-22 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Configuring an LDAP Attribute Map Fields • Name—Displays the names of the LD AP attribute maps a vailable for editing. • Attribute Map Name—Displays the mappings of customer attrib ute names to Cisco attribute names within each attribute map. • Add—Di ...

  • Cisco Systems OL-12180-01 - page 23

    12-23 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Configuring an LDAP Attribute Map Fields • Name—Specif ies the name of the LD AP attribute map you are adding or editing. If you are adding a ne w map, you enter the name of the map in this f ield. If you are editing a map that was selected in the LD AP Attri ...

  • Cisco Systems OL-12180-01 - page 24

    12-24 ASDM User Guide OL-12180-01 Chapter 12 Configuring AAA Servers and User Accounts Configuring an LDAP Attribute Map • Customer V alue—Specif ies a customer value for the selected customer attribute. • Cisco V alue—Specif ies the Cisco value for the selected customer attribute. • Add—Adds the v alue mapping to the customer attribute ...

Fabricant Cisco Systems Catégorie Server

Les documents que nous recevons du fabricant de l'appareilCisco Systems OL-12180-01 peuvent être divisés en plusieurs groupes. Ceux-ci sont, entre autres:
- dessins techniques Cisco Systems
- manuels d’utilisations OL-12180-01
- fiches produit Cisco Systems
- dépliants
- ou étiquettes-énergie Cisco Systems OL-12180-01
Tous sont importants, mais les informations les plus importantes du point de vue de l'utilisation de l'appareil se trouvent dans le manuel d’utilisation Cisco Systems OL-12180-01.

Un groupe de documents appelé manuels d’utilisation est également divisé en types plus spécifiques, tels que: Manuels d’installation Cisco Systems OL-12180-01, manuels d’entretien, brefs manuels ou manuels de l’utilisateur Cisco Systems OL-12180-01. Selon vos besoins, vous devriez chercher le document dont vous avez besoin. Sur notre site, vous pouvez voir le manuel le plus populaire d’utilisation du produit Cisco Systems OL-12180-01.

Manuels d’utilsiation similaires

Manuel d’utilisation complet de l’appareil Cisco Systems OL-12180-01, quelle devrait-elle être?
Le manuel d’utilisation, également appelé le mode d’emploi, ou tout simplement le manuel, est un document technique destiné à aider à utiliser Cisco Systems OL-12180-01 par les utilisateurs. Des manuels sont généralement écrits par un rédacteur technique, mais dans un langage accessible à tous les utilisateurs Cisco Systems OL-12180-01.

Le manuel d’utilisation complet Cisco Systems, devrait inclure plusieurs éléments de base. Certains d'entre eux sont moins importants, tels que: la couverture / page de titre ou pages d'auteur. Cependant, la partie restante, devrait nous fournir des informations importantes du point de vue de l'utilisateur.

1. Introduction et des conseils sur la façon d'utiliser le manuel Cisco Systems OL-12180-01 - Au début de chaque manuel, nous devrions trouver des indices sur la façon d'utiliser le document. Il doit contenir des informations sur l'emplacement de la table des matières Cisco Systems OL-12180-01, FAQ ou des problèmes les plus fréquents - les points qui sont les plus souvent recherchés par les utilisateurs de chaque manuel
2. Table des matières - index de tous les conseils pour lCisco Systems OL-12180-01 qui peuvent être trouvés dans le document courant
3. Conseils sur la façon d'utiliser les fonctions de base de l’appareil Cisco Systems OL-12180-01 - qui devraient nous aider dans les premières étapes lors de l'utilisation Cisco Systems OL-12180-01
4. Troubleshooting - séquence systématique des activités qui nous aideront à diagnostiquer et ensuite résoudre les principaux problèmes de Cisco Systems OL-12180-01
5. FAQ - questions fréquemment posées
6. Détails du contact Informations sur l'endroit où chercher le contact avec le fabricant / service Cisco Systems OL-12180-01 dans un pays donné, si le problème ne peut être résolu par nous-mêmes.

Avez-vous une question à propos de Cisco Systems OL-12180-01?

Utiliser le formulaire ci-dessous

Si vous n’avez pas résolu votre problème avec Cisco Systems OL-12180-01, avec l'aide du manuel que vous avez trouvé, posez une question en utilisant le formulaire ci-dessous. Si un utilisateur a eu un problème similaire avec Cisco Systems OL-12180-01 il est probable qu’il a envie de partager la façon de le résoudre.

Réécrire le texte de l'image

Commentaires (0)