Gebruiksaanwijzing /service van het product OL-9971-01 van de fabrikant Cisco Systems
Ga naar pagina of 30
CHAPTER 3-1 User Guide for Cisco Secure Access Control Server OL-9971-01 3 Network Configuration This chapter details concepts and procedures for conf iguring the Cisco Secure Access Control Server Release 4.
3-2 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration About ACS in Distributed Systems • Remote Agents (A CS Solution Engine)—This table lists each remote agent that is conf igured together with its IP address and av ailable services.
3-3 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems These types of access control hav e unique authentication and authorization requirements.
3-4 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems An Example This section presents a scenario of proxy that is used in an enterprise system. Mary is an employee with an of f ice in the corporate headquarters in Los Angeles.
3-5 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems continues, in order , down the list, until the AAA servers handles the authentication request. (F ailed connections are detected by failure of the nominated server to respond within a specif ied time period.
3-6 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • Sending the accounting information to the remote AAA server also enables you to use the Max Sessions feature. The Max Sessions feature uses the Start and Stop records in the accounting packet.
3-7 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • T ype —The device type, as specif ied by the AAA protocol that it is conf igured to use, or the kind of AAA server it is. Y ou can also search for Solution Engine remote agents.
3-8 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 6 If you want to do wnload a f ile containing the search results in a comma-separated value format, click Download , and use your bro wser to save the f ile to a location and f ilename of your choice.
3-9 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – Number —Y ou can specify a number, for e xample, 10.3.157.98. – Numeric Range —Y ou can specify the low and high numbers of the range in the octet, separated by a hyphen (-), for example, 10.
3-10 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients The Authenticate Using list always contains: – T A CA CS+ (Cisco IOS) —The Cisco IOS T A CACS+ protocol, which is the standard choice when using Cisco Systems access servers, routers, and f irewalls.
3-11 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – RADIUS (Nortel) —RADIUS using Nortel RADIUS VSAs. Select this option if the network de vice is a Nortel network de vice that supports authentication via RADIUS.
3-12 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients T o add AAA clients: Step 1 In the navigation bar , click Network Conf iguration .
3-13 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA client is assigned. Then, click the name of the AAA client.
3-14 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Deleting AAA Clients T o delete AAA clients: Step 1 In the navigation bar , click Network Conf iguration . The Network Conf iguration page opens.
3-15 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Deleting AAA Servers, page 3-18 AAA Server Configuration Options AAA server conf igurations enable ACS to interact with the AAA serv er that the conf iguration represents.
3-16 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Log Update/W atchdog Pack ets from this remote AAA Serv er —Enables logging of update or watchdog packets from AAA clients that are forw arded by the remote AAA server to this A CS.
3-17 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA server is to be assigned. Then, click Add Entry belo w the [name] AAA Servers table.
3-18 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Step 3 Enter or change AAA server settings, as needed. F or information about the conf iguration options av ailable for the AAA server , see AAA Server Conf iguration Options, page 3-15 .
3-19 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) This section contains the following topics: • A.
3-20 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Note If the port number that you provide does not match the port the remote agent that you conf igured for listening, A CS cannot communicate with the remote agent.
3-21 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) The Add Remote Agent page appears. Step 3 In the Remote Agent Name box, type a name for the remote agent (up to 32 characters).
3-22 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) T o edit a remote agent conf iguration: Step 1 In the navigation bar , click Network Conf iguration .
3-23 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 Perform one of the following steps, based on your use of NDGs: a. If you are using NDGs, click the name of the NDG to which the remote agent belongs.
3-24 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Adding a Network Device Group Y ou can assign users or groups of users to NDGs.
3-25 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Note Y ou must enable the Ke y Wrap feature in the N AP Authentication Settings page to implement these shared keys in EAP-TLS authentication.
3-26 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 In the Network De vice Groups table, click the name of the current group of the network device.
3-27 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Deleting a Network Device Group When you delete an NDG, all AAA clients and AAA servers that belong to the deleted group appear in the Not Assigned AAA Clients or Not Assigned AAA Servers table.
3-28 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables About the Proxy Distribution Table If you enabled the Distributed Systems Settings, when you click Netw ork Conf iguration, you will see the Proxy Distribution T able.
3-29 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 5 From the Strip list, select Ye s to strip the character string from the username that you entered, or select No to leav e it.
3-30 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 3 Select the character string entry to reorder , and then click Up or Down to mov e its position to ref lect the search order that you want.
Een belangrijk punt na aankoop van elk apparaat Cisco Systems OL-9971-01 (of zelfs voordat je het koopt) is om de handleiding te lezen. Dit moeten wij doen vanwege een paar simpele redenen:
Als u nog geen Cisco Systems OL-9971-01 heb gekocht dan nu is een goed moment om kennis te maken met de basisgegevens van het product. Eerst kijk dan naar de eerste pagina\'s van de handleiding, die je hierboven vindt. Je moet daar de belangrijkste technische gegevens Cisco Systems OL-9971-01 vinden. Op dit manier kan je controleren of het apparaat aan jouw behoeften voldoet. Op de volgende pagina's van de handleiding Cisco Systems OL-9971-01 leer je over alle kenmerken van het product en krijg je informatie over de werking. De informatie die je over Cisco Systems OL-9971-01 krijgt, zal je zeker helpen om een besluit over de aankoop te nemen.
In een situatie waarin je al een beziter van Cisco Systems OL-9971-01 bent, maar toch heb je de instructies niet gelezen, moet je het doen voor de hierboven beschreven redenen. Je zult dan weten of je goed de alle beschikbare functies heb gebruikt, en of je fouten heb gemaakt die het leven van de Cisco Systems OL-9971-01 kunnen verkorten.
Maar de belangrijkste taak van de handleiding is om de gebruiker bij het oplossen van problemen te helpen met Cisco Systems OL-9971-01 . Bijna altijd, zal je daar het vinden Troubleshooting met de meest voorkomende storingen en defecten #MANUAl# samen met de instructies over hun opplosinge. Zelfs als je zelf niet kan om het probleem op te lossen, zal de instructie je de weg wijzen naar verdere andere procedure, bijv. door contact met de klantenservice of het dichtstbijzijnde servicecentrum.
