Benutzeranleitung / Produktwartung OL-9971-01 des Produzenten Cisco Systems
Zur Seite of 30
CHAPTER 3-1 User Guide for Cisco Secure Access Control Server OL-9971-01 3 Network Configuration This chapter details concepts and procedures for conf iguring the Cisco Secure Access Control Server Release 4.
3-2 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration About ACS in Distributed Systems • Remote Agents (A CS Solution Engine)—This table lists each remote agent that is conf igured together with its IP address and av ailable services.
3-3 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems These types of access control hav e unique authentication and authorization requirements.
3-4 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems An Example This section presents a scenario of proxy that is used in an enterprise system. Mary is an employee with an of f ice in the corporate headquarters in Los Angeles.
3-5 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems continues, in order , down the list, until the AAA servers handles the authentication request. (F ailed connections are detected by failure of the nominated server to respond within a specif ied time period.
3-6 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • Sending the accounting information to the remote AAA server also enables you to use the Max Sessions feature. The Max Sessions feature uses the Start and Stop records in the accounting packet.
3-7 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • T ype —The device type, as specif ied by the AAA protocol that it is conf igured to use, or the kind of AAA server it is. Y ou can also search for Solution Engine remote agents.
3-8 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 6 If you want to do wnload a f ile containing the search results in a comma-separated value format, click Download , and use your bro wser to save the f ile to a location and f ilename of your choice.
3-9 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – Number —Y ou can specify a number, for e xample, 10.3.157.98. – Numeric Range —Y ou can specify the low and high numbers of the range in the octet, separated by a hyphen (-), for example, 10.
3-10 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients The Authenticate Using list always contains: – T A CA CS+ (Cisco IOS) —The Cisco IOS T A CACS+ protocol, which is the standard choice when using Cisco Systems access servers, routers, and f irewalls.
3-11 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – RADIUS (Nortel) —RADIUS using Nortel RADIUS VSAs. Select this option if the network de vice is a Nortel network de vice that supports authentication via RADIUS.
3-12 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients T o add AAA clients: Step 1 In the navigation bar , click Network Conf iguration .
3-13 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA client is assigned. Then, click the name of the AAA client.
3-14 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Deleting AAA Clients T o delete AAA clients: Step 1 In the navigation bar , click Network Conf iguration . The Network Conf iguration page opens.
3-15 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Deleting AAA Servers, page 3-18 AAA Server Configuration Options AAA server conf igurations enable ACS to interact with the AAA serv er that the conf iguration represents.
3-16 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Log Update/W atchdog Pack ets from this remote AAA Serv er —Enables logging of update or watchdog packets from AAA clients that are forw arded by the remote AAA server to this A CS.
3-17 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA server is to be assigned. Then, click Add Entry belo w the [name] AAA Servers table.
3-18 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Step 3 Enter or change AAA server settings, as needed. F or information about the conf iguration options av ailable for the AAA server , see AAA Server Conf iguration Options, page 3-15 .
3-19 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) This section contains the following topics: • A.
3-20 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Note If the port number that you provide does not match the port the remote agent that you conf igured for listening, A CS cannot communicate with the remote agent.
3-21 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) The Add Remote Agent page appears. Step 3 In the Remote Agent Name box, type a name for the remote agent (up to 32 characters).
3-22 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) T o edit a remote agent conf iguration: Step 1 In the navigation bar , click Network Conf iguration .
3-23 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 Perform one of the following steps, based on your use of NDGs: a. If you are using NDGs, click the name of the NDG to which the remote agent belongs.
3-24 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Adding a Network Device Group Y ou can assign users or groups of users to NDGs.
3-25 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Note Y ou must enable the Ke y Wrap feature in the N AP Authentication Settings page to implement these shared keys in EAP-TLS authentication.
3-26 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 In the Network De vice Groups table, click the name of the current group of the network device.
3-27 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Deleting a Network Device Group When you delete an NDG, all AAA clients and AAA servers that belong to the deleted group appear in the Not Assigned AAA Clients or Not Assigned AAA Servers table.
3-28 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables About the Proxy Distribution Table If you enabled the Distributed Systems Settings, when you click Netw ork Conf iguration, you will see the Proxy Distribution T able.
3-29 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 5 From the Strip list, select Ye s to strip the character string from the username that you entered, or select No to leav e it.
3-30 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 3 Select the character string entry to reorder , and then click Up or Down to mov e its position to ref lect the search order that you want.
Ein wichtiger Punkt beim Kauf des Geräts Cisco Systems OL-9971-01 (oder sogar vor seinem Kauf) ist das durchlesen seiner Bedienungsanleitung. Dies sollten wir wegen ein paar einfacher Gründe machen:
Wenn Sie Cisco Systems OL-9971-01 noch nicht gekauft haben, ist jetzt ein guter Moment, um sich mit den grundliegenden Daten des Produkts bekannt zu machen. Schauen Sie zuerst die ersten Seiten der Anleitung durch, die Sie oben finden. Dort finden Sie die wichtigsten technischen Daten für Cisco Systems OL-9971-01 - auf diese Weise prüfen Sie, ob das Gerät Ihren Wünschen entspricht. Wenn Sie tiefer in die Benutzeranleitung von Cisco Systems OL-9971-01 reinschauen, lernen Sie alle zugänglichen Produktfunktionen kennen, sowie erhalten Informationen über die Nutzung. Die Informationen, die Sie über Cisco Systems OL-9971-01 erhalten, werden Ihnen bestimmt bei der Kaufentscheidung helfen.
Wenn Sie aber schon Cisco Systems OL-9971-01 besitzen, und noch keine Gelegenheit dazu hatten, die Bedienungsanleitung zu lesen, sollten Sie es aufgrund der oben beschriebenen Gründe machen. Sie erfahren dann, ob Sie die zugänglichen Funktionen richtig genutzt haben, aber auch, ob Sie keine Fehler begangen haben, die den Nutzungszeitraum von Cisco Systems OL-9971-01 verkürzen könnten.
Jedoch ist die eine der wichtigsten Rollen, die eine Bedienungsanleitung für den Nutzer spielt, die Hilfe bei der Lösung von Problemen mit Cisco Systems OL-9971-01. Sie finden dort fast immer Troubleshooting, also die am häufigsten auftauchenden Störungen und Mängel bei Cisco Systems OL-9971-01 gemeinsam mit Hinweisen bezüglich der Arten ihrer Lösung. Sogar wenn es Ihnen nicht gelingen sollte das Problem alleine zu bewältigen, die Anleitung zeigt Ihnen die weitere Vorgehensweise – den Kontakt zur Kundenberatung oder dem naheliegenden Service.
