Cisco ASA Series Cli Configuration Manual page 915

Chapter 1 Configuring the ASA to Integrate with Cisco TrustSec
•
•
•
•
•
•
•
Task Flow for Configuring the ASA to Integrate with Cisco TrustSec
Prerequisite
Before configuring the ASA to integrate with Cisco TrustSec, you must meet the following prerequisites:
•
•
See the
Task Flow in the ASA
To configure the ASA to integrate with Cisco TrustSec, perform the following tasks:
Step 1
Configure the AAA server.
See
Step 2
Import the PAC file from the ISE.
See
Step 3
Enable and set the default values for SXP.
See
Step 4
Add SXP connection peers for the Cisco TrustSec architecture.
See
Step 5
As necessary, refresh environment data for the ASA integrated with Cisco TrustSec.
See
Step 6
Configure the Security Policy.
See
Configuring the AAA Server for Cisco TrustSec Integration
As part of configuring the ASA to integrate with Cisco TrustSec, you must configure the ASA so that it
can communicate with the ISE.
See also the
Configuring the AAA Server for Cisco TrustSec Integration, page 1-11
Importing a Protected Access Credential (PAC) File, page 1-13
Configuring the Security Exchange Protocol (SXP), page 1-14
Adding an SXP Connection Peer, page 1-17
Refreshing Environment Data, page 1-19
Configuring the Security Policy, page 1-20
Collecting User Statistics, page 1-21
Register the ASA with the ISE.
Generate the PAC file on the ISE to import into the ASA.
"Prerequisites for Integrating the ASA with Cisco TrustSec" section on page 1-8
Configuring the AAA Server for Cisco TrustSec Integration, page
Importing a Protected Access Credential (PAC) File, page
Configuring the Security Exchange Protocol (SXP), page
Adding an SXP Connection Peer, page
Refreshing Environment Data, page
Configuring the Security Policy, page
"Configuring AAA Server Groups" section on page 1-11
Configuring the ASA for Cisco TrustSec Integration
1-13.
1-14.
1-17.
1-19.
1-20.
Cisco ASA Series CLI Configuration Guide
for information.
1-11.
for more information.
1-11