Manual Cisco Systems OL-9971-01

30 pages 0.4 mb
Download

Go to site of 30

Summary
  • Cisco Systems OL-9971-01 - page 1

    CHAPTER 3-1 User Guide for Cisco Secure Access Control Server OL-9971-01 3 Network Configuration This chapter details concepts and procedures for conf iguring the Cisco Secure Access Control Server Release 4.1, hereafter referred to as A CS. Y ou use the conf iguration process to establish a distributed system, and set up interaction with authentic ...

  • Cisco Systems OL-9971-01 - page 2

    3-2 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration About ACS in Distributed Systems • Remote Agents (A CS Solution Engine)—This table lists each remote agent that is conf igured together with its IP address and av ailable services. For more information about remote agents, see About Remote Agents, p ...

  • Cisco Systems OL-9971-01 - page 3

    3-3 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems These types of access control hav e unique authentication and authorization requirements. With A CS, system administrators can use a variety of authentication methods that are used with dif ferent degrees of authorization pr ...

  • Cisco Systems OL-9971-01 - page 4

    3-4 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems An Example This section presents a scenario of proxy that is used in an enterprise system. Mary is an employee with an of f ice in the corporate headquarters in Los Angeles. Her username is mary@la.corporate .com . When Mary ...

  • Cisco Systems OL-9971-01 - page 5

    3-5 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems continues, in order , down the list, until the AAA servers handles the authentication request. (F ailed connections are detected by failure of the nominated server to respond within a specif ied time period. That is, the req ...

  • Cisco Systems OL-9971-01 - page 6

    3-6 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • Sending the accounting information to the remote AAA server also enables you to use the Max Sessions feature. The Max Sessions feature uses the Start and Stop records in the accounting packet. If the remote AAA server is an A ...

  • Cisco Systems OL-9971-01 - page 7

    3-7 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • T ype —The device type, as specif ied by the AAA protocol that it is conf igured to use, or the kind of AAA server it is. Y ou can also search for Solution Engine remote agents. If you do not want to limit the search based ...

  • Cisco Systems OL-9971-01 - page 8

    3-8 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 6 If you want to do wnload a f ile containing the search results in a comma-separated value format, click Download , and use your bro wser to save the f ile to a location and f ilename of your choice. Step 7 If you want to s ...

  • Cisco Systems OL-9971-01 - page 9

    3-9 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – Number —Y ou can specify a number, for e xample, 10.3.157.98. – Numeric Range —Y ou can specify the low and high numbers of the range in the octet, separated by a hyphen (-), for example, 10.3.157.10-50. – Wildcard ? ...

  • Cisco Systems OL-9971-01 - page 10

    3-10 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients The Authenticate Using list always contains: – T A CA CS+ (Cisco IOS) —The Cisco IOS T A CACS+ protocol, which is the standard choice when using Cisco Systems access servers, routers, and f irewalls. If the AAA client is a C ...

  • Cisco Systems OL-9971-01 - page 11

    3-11 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – RADIUS (Nortel) —RADIUS using Nortel RADIUS VSAs. Select this option if the network de vice is a Nortel network de vice that supports authentication via RADIUS. – RADIUS (iPass) —RADIUS for AAA clients using iPass RADI ...

  • Cisco Systems OL-9971-01 - page 12

    3-12 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients T o add AAA clients: Step 1 In the navigation bar , click Network Conf iguration . The Network Conf iguration page opens. Step 2 Do one of the follo wing: • If you are using NDGs, click the name of the NDG to which you want to ...

  • Cisco Systems OL-9971-01 - page 13

    3-13 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA client is assigned. Then, click the name of the AAA client. • T o edit AAA clients when you have not enabled NDGs, click the ...

  • Cisco Systems OL-9971-01 - page 14

    3-14 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Deleting AAA Clients T o delete AAA clients: Step 1 In the navigation bar , click Network Conf iguration . The Network Conf iguration page opens. Step 2 Do one of the follo wing: • If you are using NDGs, click the name of the ...

  • Cisco Systems OL-9971-01 - page 15

    3-15 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Deleting AAA Servers, page 3-18 AAA Server Configuration Options AAA server conf igurations enable ACS to interact with the AAA serv er that the conf iguration represents. AAA servers that do not ha ve a corresponding conf i ...

  • Cisco Systems OL-9971-01 - page 16

    3-16 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Log Update/W atchdog Pack ets from this remote AAA Serv er —Enables logging of update or watchdog packets from AAA clients that are forw arded by the remote AAA server to this A CS. W atchdog packets are interim packets th ...

  • Cisco Systems OL-9971-01 - page 17

    3-17 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA server is to be assigned. Then, click Add Entry belo w the [name] AAA Servers table. • T o add AAA servers when you hav e no ...

  • Cisco Systems OL-9971-01 - page 18

    3-18 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Step 3 Enter or change AAA server settings, as needed. F or information about the conf iguration options av ailable for the AAA server , see AAA Server Conf iguration Options, page 3-15 . Step 4 T o ...

  • Cisco Systems OL-9971-01 - page 19

    3-19 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) This section contains the following topics: • About Remote Agents, page 3-19 • Remote Agent Conf iguration Options, page 3-19 • Adding a Remote Agent, page 3-20 • Editing a Remote Agent Conf ...

  • Cisco Systems OL-9971-01 - page 20

    3-20 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Note If the port number that you provide does not match the port the remote agent that you conf igured for listening, A CS cannot communicate with the remote agent. For information about conf iguring ...

  • Cisco Systems OL-9971-01 - page 21

    3-21 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) The Add Remote Agent page appears. Step 3 In the Remote Agent Name box, type a name for the remote agent (up to 32 characters). Step 4 In the Remote Agent IP Address box, type the IP address of the c ...

  • Cisco Systems OL-9971-01 - page 22

    3-22 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) T o edit a remote agent conf iguration: Step 1 In the navigation bar , click Network Conf iguration . The Network Conf iguration section opens. Step 2 Perform one of the following steps, based on you ...

  • Cisco Systems OL-9971-01 - page 23

    3-23 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 Perform one of the following steps, based on your use of NDGs: a. If you are using NDGs, click the name of the NDG to which the remote agent belongs. Then, in the NDG Remote Agents table, click the name of the r ...

  • Cisco Systems OL-9971-01 - page 24

    3-24 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Adding a Network Device Group Y ou can assign users or groups of users to NDGs. For more information, see: • Setting T A CACS+ Enable P assword Options for a User , page 6-23 • Setting Enable Privile ge Options for ...

  • Cisco Systems OL-9971-01 - page 25

    3-25 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Note Y ou must enable the Ke y Wrap feature in the N AP Authentication Settings page to implement these shared keys in EAP-TLS authentication. Step 6 Click Submit . The Network De vice Groups table displays the new NDG ...

  • Cisco Systems OL-9971-01 - page 26

    3-26 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 In the Network De vice Groups table, click the name of the current group of the network device. Step 3 In the AAA Clients table or AAA Servers table, as applicable, click the name of the client or serv er that y ...

  • Cisco Systems OL-9971-01 - page 27

    3-27 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Deleting a Network Device Group When you delete an NDG, all AAA clients and AAA servers that belong to the deleted group appear in the Not Assigned AAA Clients or Not Assigned AAA Servers table. Ti p It might be us ...

  • Cisco Systems OL-9971-01 - page 28

    3-28 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables About the Proxy Distribution Table If you enabled the Distributed Systems Settings, when you click Netw ork Conf iguration, you will see the Proxy Distribution T able. Ti p T o enable Distributed Systems Settings i ...

  • Cisco Systems OL-9971-01 - page 29

    3-29 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 5 From the Strip list, select Ye s to strip the character string from the username that you entered, or select No to leav e it. Step 6 In the AAA Servers column, select the AAA serv er that you want to use for ...

  • Cisco Systems OL-9971-01 - page 30

    3-30 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 3 Select the character string entry to reorder , and then click Up or Down to mov e its position to ref lect the search order that you want. Step 4 When you f inish sorting, click Submit or Submit + A pply . E ...

Manufacturer Cisco Systems Category Network Card

Documents that we receive from a manufacturer of a Cisco Systems OL-9971-01 can be divided into several groups. They are, among others:
- Cisco Systems technical drawings
- OL-9971-01 manuals
- Cisco Systems product data sheets
- information booklets
- or energy labels Cisco Systems OL-9971-01
All of them are important, but the most important information from the point of view of use of the device are in the user manual Cisco Systems OL-9971-01.

A group of documents referred to as user manuals is also divided into more specific types, such as: Installation manuals Cisco Systems OL-9971-01, service manual, brief instructions and user manuals Cisco Systems OL-9971-01. Depending on your needs, you should look for the document you need. In our website you can view the most popular manual of the product Cisco Systems OL-9971-01.

A complete manual for the device Cisco Systems OL-9971-01, how should it look like?
A manual, also referred to as a user manual, or simply "instructions" is a technical document designed to assist in the use Cisco Systems OL-9971-01 by users. Manuals are usually written by a technical writer, but in a language understandable to all users of Cisco Systems OL-9971-01.

A complete Cisco Systems manual, should contain several basic components. Some of them are less important, such as: cover / title page or copyright page. However, the remaining part should provide us with information that is important from the point of view of the user.

1. Preface and tips on how to use the manual Cisco Systems OL-9971-01 - At the beginning of each manual we should find clues about how to use the guidelines. It should include information about the location of the Contents of the Cisco Systems OL-9971-01, FAQ or common problems, i.e. places that are most often searched by users in each manual
2. Contents - index of all tips concerning the Cisco Systems OL-9971-01, that we can find in the current document
3. Tips how to use the basic functions of the device Cisco Systems OL-9971-01 - which should help us in our first steps of using Cisco Systems OL-9971-01
4. Troubleshooting - systematic sequence of activities that will help us diagnose and subsequently solve the most important problems with Cisco Systems OL-9971-01
5. FAQ - Frequently Asked Questions
6. Contact detailsInformation about where to look for contact to the manufacturer/service of Cisco Systems OL-9971-01 in a specific country, if it was not possible to solve the problem on our own.

Do you have a question concerning Cisco Systems OL-9971-01?

Use the form below

If you did not solve your problem by using a manual Cisco Systems OL-9971-01, ask a question using the form below. If a user had a similar problem with Cisco Systems OL-9971-01 it is likely that he will want to share the way to solve it.

Copy the text from the picture

Comments (0)