Manuale per l’uso Cisco Systems ASA 5500

49 pagine 3.85 mb
Scarica

Vai alla pagina of 49

Summary
  • Cisco Systems ASA 5500 - page 1

    Installation Guide Strong authentication for Cisco ASA 5500 Clientless SSL VPN and Cisco VPN Client Solutions with One Time Password Server The complete installation guide for securing the authentication to your Cisco ASA 5500 solution with Nordic Edge One Time Pa ssword Server, delivering two-factor authentication via SMS to your mobile phone. For ...

  • Cisco Systems ASA 5500 - page 2

    Installation Guide Content 1 SUMMARY .............................................................................................................................. ........ 4 2 PREREQUISITES ........................................................................................................................... 4 3 IMPORTANT INFORMATI ON REGARDIN ...

  • Cisco Systems ASA 5500 - page 3

    Installation Guide 9.2 Browse to Configuration, Remote Access VPN, AAA/Local Users, AAA Serv er Groups and click Add. .............................................................................................................................. ........ 33 9.3 Name Server Group OTPserv er, choose protocol RADIUS .................................... ...

  • Cisco Systems ASA 5500 - page 4

    Installation Guide 1 Summary This is the complete installation guide for secu ring the authentication to your Cisco ASA 5500 solution with Nordic Edge One Time Passwo rd Server, deliv ering two-factor authentication via SMS to your mobile phone. For both clientless SSL VPN and Cisco VPN Client. You will be able to test the produ ct with your existi ...

  • Cisco Systems ASA 5500 - page 5

    Installation Guide 4 Getting started 4.1 1.1 Download the software Go to www.nordicedge.se and click on Do wnload www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 5 of 49 ...

  • Cisco Systems ASA 5500 - page 6

    Installation Guide 4.2 Register and download the softw are www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 6 of 49 ...

  • Cisco Systems ASA 5500 - page 7

    Installation Guide You will receive a link for downl oading the software. A 30 days evaluation license will be sent via e-mai l when you download the software. Download the version with JAVA included. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 7 of 49 ...

  • Cisco Systems ASA 5500 - page 8

    Installation Guide www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 8 of 49 ...

  • Cisco Systems ASA 5500 - page 9

    Installation Guide 5 Installation 5.1 Start the installation Start the installation on the server where you w ant to install the One Time Password Server www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 9 of 49 ...

  • Cisco Systems ASA 5500 - page 10

    Installation Guide www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 10 of 49 ...

  • Cisco Systems ASA 5500 - page 11

    Installation Guide 5.2 Installing license Choose the license.dat that you have received via e- mail. This is important, sin ce if you want to request a demo SMS account at Nordic Edge later in the installation, you need to install the license at this moment. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 11 of 49 ...

  • Cisco Systems ASA 5500 - page 12

    Installation Guide Note, if you are in a test-phase, we recommend that you do not install the OTP-S erver a s a Windows Service. . www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 12 of 49 ...

  • Cisco Systems ASA 5500 - page 13

    Installation Guide www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 13 of 49 ...

  • Cisco Systems ASA 5500 - page 14

    Installation Guide www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 14 of 49 ...

  • Cisco Systems ASA 5500 - page 15

    Installation Guide 6 Configuring the One Ti me Password Server 6.1 Start the OTP Configuration Start the OTP Configurator by clicking on Programs / NordicEdge / OTP Config urator www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 15 of 49 ...

  • Cisco Systems ASA 5500 - page 16

    Installation Guide 6.2 Server page On the Server page you can set the length of the one-time password and for how long it shoul d be valid. Default is 5 minutes. You can also set a default cou ntry prefix , which means that you will not need to state it in the mobile attribute. The One Time Password communi cates with TCP protocol portnr 3100. www. ...

  • Cisco Systems ASA 5500 - page 17

    Installation Guide 6.3 Plugin manager page On the Plugin manager page you can configure all m e thods and in which order you want to u se them. In this case we will be using Nord ic Edge SMS gateway to deliver the one-time password via SMS to your mobile phone. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 17 of 49 ...

  • Cisco Systems ASA 5500 - page 18

    Installation Guide 6.3.1 Nordic Edge SMS Plugin Move the Plugin Nordic Edge SMS to the top of the plugins. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 18 of 49 ...

  • Cisco Systems ASA 5500 - page 19

    Installation Guide 6.4 Nordic Edge SMS Page Look at the Nordic Edge SMS Page. If you installed the license.dat during the in stallation and checked the box "Request a demo SMS account at Nordi c Edge", an account shoul d no w be preconfigured for you. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 19 of 49 ...

  • Cisco Systems ASA 5500 - page 20

    Installation Guide 6.5 Radius & Client page For configuring One Time Password s Server to act as radius server go to the Radius & Client page. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 20 of 49 ...

  • Cisco Systems ASA 5500 - page 21

    Installation Guide 6.5.1 Enable Radius Enable Radius and choose one of the radius p orts 1 645 or 1812 that you want to use. Make sure that the client (Cisco 5500 ASA) is using the same radius port. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 21 of 49 ...

  • Cisco Systems ASA 5500 - page 22

    Installation Guide 6.6 Add client Click on Add Client and enter Cli ent Display name and the ip-addre ss for the Cisco 5500 ASA. Please note that you should not use the hostname here. Make sure that “Is RADI US” is ch ecked and enter the correct Sha red Secret. In the category User Da tabase ( s) click Ne w. www.nordicedge.se Copyright, 2008, N ...

  • Cisco Systems ASA 5500 - page 23

    Installation Guide 6.7 Configure LDAP Enter a Database Display Name a nd th e host address for your LDAP user database. In this case we are using Microsoft Active Directory with SSL and the users’ mobile attribute for sendin g one time passwords. 6.7.1 Test LDAP Connection Click on Test LDAP Connection an d make sure that you get an LDAP Connecti ...

  • Cisco Systems ASA 5500 - page 24

    Installation Guide www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 24 of 49 ...

  • Cisco Systems ASA 5500 - page 25

    Installation Guide 6.7.2 Selecting Search Base DN Click on the box for selecting Search Base DN: www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 25 of 49 ...

  • Cisco Systems ASA 5500 - page 26

    Installation Guide Select a Base Dn where your users are. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 26 of 49 ...

  • Cisco Systems ASA 5500 - page 27

    Installation Guide 6.7.3 Select Search filter Click on samples and select the right filter for you r LDAP Use r data base, in this case Active Di rectory. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 27 of 49 ...

  • Cisco Systems ASA 5500 - page 28

    Installation Guide www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 28 of 49 ...

  • Cisco Systems ASA 5500 - page 29

    Installation Guide 6.7.4 Test LDAP Authentication Click on Test LDAP Authentication and make sure you can authent icate. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 29 of 49 ...

  • Cisco Systems ASA 5500 - page 30

    Installation Guide Exit the configurator by clicking OK twic e and make sure to cli ck on the Save button End of Step “Configuring the One Time Password Se rver” www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 30 of 49 ...

  • Cisco Systems ASA 5500 - page 31

    Installation Guide 7 Start the One Time Password Server Start the One Time Password by going to Progr am folder, NordicEdge,OTPServe r and kli ck on OTP Server www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 31 of 49 ...

  • Cisco Systems ASA 5500 - page 32

    Installation Guide 8 Add mobile phone number with Microsoft Management Console Add mobile phone number to your test users mobile p hone attribute Start MMC and select the user that you want to us e for testing and enter the mobile pho ne number in the Mobile attribute. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 32 of 49 ...

  • Cisco Systems ASA 5500 - page 33

    Installation Guide 9 Configuring ASA5500 for SSL VP N authentication with Nordic Edge One Time Password Server 9.1 Start ASA device manager 9.2 Browse to Configuration, Remote Access VPN, AAA/Local User s, AAA Server Groups and click Add. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 33 of 49 ...

  • Cisco Systems ASA 5500 - page 34

    Installation Guide 9.3 Name Server Group OTPserver, choose protocol RADIUS www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 34 of 49 ...

  • Cisco Systems ASA 5500 - page 35

    Installation Guide 9.4 Add new radius server to the RADIUS group 9.5 Configure Radius Server : Interface name, IP address to OTPserver and the pre-shared key between the On e Time Password server and Cisco ASA5500. Ensure you use the same radius ports in both OTPserver ASA5500. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 35 of 49 ...

  • Cisco Systems ASA 5500 - page 36

    Installation Guide You have now configured a group ”OTPserver ” and defined a Radius Server in this group. This group can now be used as an authentication method. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 36 of 49 ...

  • Cisco Systems ASA 5500 - page 37

    Installation Guide 9.6 Create a ”test” connection pr ofile (in case you want to test this for certain users only). 9.6.1 Browse to Configur ation/Remote Access/ Clientless SSL VPN Access/Connection Prof iles and click Add www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 37 of 49 ...

  • Cisco Systems ASA 5500 - page 38

    Installation Guide 9.6.2 Specify Connection Profile Name 9.6.3 Specify AAA Server Group = OTPserver www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 38 of 49 ...

  • Cisco Systems ASA 5500 - page 39

    Installation Guide www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 39 of 49 ...

  • Cisco Systems ASA 5500 - page 40

    Installation Guide 9.6.4 Edit Connection Profile Clientless SSL VPN Settings 9.6.5 Add Alias if user should be able to select authentication method by drop- down-list www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 40 of 49 ...

  • Cisco Systems ASA 5500 - page 41

    Installation Guide 9.6.6 Edit Connection Profile Clientless SSL VPN Settings 9.6.7 Add Group URL if user should be ab le to select authentication by specifying URL 9.6.8 If user should be allowed to select authentication method by drop-down- list, 9.6.9 select this item. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 41 of 49 ...

  • Cisco Systems ASA 5500 - page 42

    Installation Guide www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 42 of 49 ...

  • Cisco Systems ASA 5500 - page 43

    Installation Guide www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 43 of 49 ...

  • Cisco Systems ASA 5500 - page 44

    Installation Guide Login successful, the user will now get to his portal, which can be customized depending on Active Direct ory membership, PC health status ( antivirus , hotfix etc ) and authentication method www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 44 of 49 ...

  • Cisco Systems ASA 5500 - page 45

    Installation Guide 10 Configuring ASA5500 for Cisco VP N Client authentication with Nordic Edge OTP Server 10.1 Add a new ( or Edit an existing) Cisco VPN Client C onnection Profile to use the OTPserver www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 45 of 49 ...

  • Cisco Systems ASA 5500 - page 46

    Installation Guide 10.2 At the Cisco VPN Client, create an entry with correct name and password • Name must match the connection pr ofile name at previous slide. • Password must match the pre- shared key in ASA5500. (Note : This can be distribut ed via MSI installation) www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 46 of 49 ...

  • Cisco Systems ASA 5500 - page 47

    Installation Guide 11 Start testing 11.1 Enter your Userid and password as usual 11.2 You will receive a one-time password to your mobile phone within a couple of seconds. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 47 of 49 ...

  • Cisco Systems ASA 5500 - page 48

    Installation Guide 11.3 Enter your one time password and click on “OK”. www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 48 of 49 ...

  • Cisco Systems ASA 5500 - page 49

    Installation Guide www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 49 of 49 12 Purchase If you want to purchase the product, you ar e more than welcome to conta ct us at sales@nordicedge. se and we will send you an offer. Please note that the price will dep end o n number of users. 13 Technical questions If you have any technical questions, ...

Fabbricante Cisco Systems Categoria Network Router

I documenti che otteniamo dal fabbricante del dispositivoCisco Systems ASA 5500 possono essere suddivisi in diversi gruppi. Questi sono tra gli altri:
- disegni tecnici Cisco Systems
- manuali per l’uso ASA 5500
- schede prodotto Cisco Systems
- opuscoli
- o etichette energetiche Cisco Systems ASA 5500
Tutti sono importanti, ma le informazioni più importanti dal punto di vista di utilizzo del dispositivo possono essere trovate nel manuale per l’uso Cisco Systems ASA 5500.

Un gruppo di documenti denominato manuali per l’uso, è anche suddiviso in tipi più specifici, come: Manuali di installazione Cisco Systems ASA 5500, manuali di manutenzione, brevi manuali o manuali utente Cisco Systems ASA 5500. A seconda delle esigenze, si dovrebbe cercare il documento necessario. Nel nostro sito web, puoi visualizzare il manuale più popolare per l'uso del prodotto Cisco Systems ASA 5500.

Manuali per l’uso simili

Manuale completo del dispositivo Cisco Systems ASA 5500, come deve essere?
Il manuale per l’uso, denominato anche istruzioni per l’uso, o semplicemente il manuale è un documento tecnico progettato per aiutare ad utilizzare Cisco Systems ASA 5500 dagli utenti. I manuali sono di solito scritti da uno scrittore tecnico, ma in un linguaggio accessibile a tutti gli utenti Cisco Systems ASA 5500.

Il manuale per l’uso completo Cisco Systems, dovrebbe includere vari elementi di base. Alcuni di loro sono meno importanti, come ad esempio: copertina / pagina del titolo o pagina di autore. Tuttavia, la parte rimanente, dovrebbe fornire informazioni importanti dal punto di vista dell'utente.

1. Introduzione e la guida su come utilizzare il manuale Cisco Systems ASA 5500 - All'inizio di ogni manuale, dovremmo trovare indizi su come utilizzare il documento. Dovrebbe contenere informazioni sulla posizione dell’indice Cisco Systems ASA 5500, FAQ o i problemi più comuni : i punti che sono più spesso cercati dagli utenti di ogni manuale
2. Indice - elenco di tutti i suggerimenti per Cisco Systems ASA 5500 che possono essere trovati nel documento corrente
3. Suggerimenti su come utilizzare le funzioni di base del dispositivo Cisco Systems ASA 5500 - che ci dovrebbe aiutare nei primi passi durante l'uso Cisco Systems ASA 5500
4. Troubleshooting - sequenza sistematica delle attività che vi aiuterà a diagnosticare e, successivamente, risolvere i problemi più importanti del Cisco Systems ASA 5500
5. FAQ - domande più frequenti
6. Dettagli di contatto Informazioni su dove cercare il contatto con il fabbricante / servizio Cisco Systems ASA 5500 in un dato paese, se il problema non può essere risolto da noi stessi.

Hai una domanda su Cisco Systems ASA 5500?

Utilizza il modulo sottostante

Se non hai risolto il problema con Cisco Systems ASA 5500 con l'aiuto del manuale che hai trovato, fai una domanda utilizzando il modulo sottostante. Se un utente ha avuto un problema simile con Cisco Systems ASA 5500 è probabile che voglia condividere il modo di risolverlo.

Riscrivi il testo dall’immagine

Commenti (0)