Cisco Secure Access Control Server Manuals

Manuals and User Guides for Cisco Secure Access Control Server. We have 2 Cisco Secure Access Control Server manuals available for free PDF download: User Manual, Configuration Manual

Cisco Secure Access Control Server User Manual (860 pages)

for Windows Server Version 3.3

Brand: Cisco | Category: Software | Size: 6.95 MB

Table of Contents
4
Product Documentation
32
Related Documentation
33
Obtaining Documentation
35
Documentation Feedback
36
Obtaining Technical Assistance
37
Obtaining Additional Publications and Information
39
Aaa Server Functions and Concepts
45
AAA Protocols-TACACS+ and RADIUS
46
Radius
47
Tacacs
47
Authentication
48
Authentication and User Databases
49
Authentication Considerations
49
Authentication Protocol-Database Compatibility
50
Passwords
51
Other Authentication-Related Features
56
Authorization
57
Dynamic Usage Quotas
58
Max Sessions
58
Shared Profile Components
58
Support for Cisco Device-Management Applications
59
Other Authorization-Related Features
61
Accounting
62
Other Accounting-Related Features
62
Administration
63
HTTP Port Allocation for Administrative Sessions
63
Network Device Groups
64
Other Administration-Related Features
64
Cisco Secure ACS HTML Interface
65
Posture Validation
65
About the Cisco Secure ACS HTML Interface
66
HTML Interface Security
66
HTML Interface Layout
67
Uniform Resource Locator for the HTML Interface
69
Administrative Sessions and HTTP Proxy
70
Network Environments and Administrative Sessions
70
Administrative Sessions through a NAT Gateway
71
Administrative Sessions through Firewalls
71
Accessing the HTML Interface
72
Logging off the HTML Interface
73
Online Help and Online Documentation
73
Using Online Help
74
Using the Online Documentation
74
Chapter 2 Deployment Considerations

78
- Basic Deployment Requirements for Cisco Secure ACS
  78
- System Requirements
  78
- Hardware Requirements
  78
- Operating System Requirements
  78
- Third-Party Software Requirements
  79
- Network and Port Requirements
  80
- Basic Deployment Factors for Cisco Secure ACS
  82
- Network Topology
  82
- Dial-Up Topology
  82
- Wireless Network
  85
- Remote Access Using VPN
  88
- Remote Access Policy
  90
- Security Policy
  91
- Administrative Access Policy
  91
- Separation of Administrative and General Users
  93
- Database
  94
- Number of Users
  94
- Type of Database
  94
- Network Latency and Reliability
  95
- Suggested Deployment Sequence
  95
- Interface Configuration
  99
Chapter 3 Interface Configuration

100
Chapter 4 Network Configuration

118
- About Distributed Systems
  118
- AAA Servers in Distributed Systems
  119
- Default Distributed System Settings
  119
- Proxy in Distributed Systems
  120
- Fallback on Failed Connection
  121
- Character String
  122
- Stripping
  122
- Proxy in an Enterprise
  122
- Remote Use of Accounting Packets
  123
- Other Features Enabled by System Distribution
  124
- Network Device Searches
  124
- Network Device Search Criteria
  124
- Searching for Network Devices
  125
- AAA Client Configuration
  127
- AAA Client Configuration Options
  127
- Adding a AAA Client
  132
- Editing a AAA Client
  135
- Deleting a AAA Client
  137
- AAA Server Configuration
  137
- AAA Server Configuration Options
  138
- Adding a AAA Server
  140
- Editing a AAA Server
  142
- Deleting a AAA Server
  144
- Network Device Group Configuration
  144
- Adding a Network Device Group
  145
- Assigning an Unassigned AAA Client or AAA Server to an NDG
  146
- Reassigning a AAA Client or AAA Server to an NDG
  147
- Renaming a Network Device Group
  148
- Deleting a Network Device Group
  148
- Proxy Distribution Table Configuration
  150
- About the Proxy Distribution Table
  150
- Adding a New Proxy Distribution Table Entry
  151
- Sorting the Character String Match Order of Distribution Entries
  152
- Editing a Proxy Distribution Table Entry
  153
- Deleting a Proxy Distribution Table Entry
  154
- Shared Profile Components
  155
- About Shared Profile Components
  155
- Network Access Filters
  156
- About Network Access Filters
  156
Chapter 5 Shared Profile Component

157
- Adding a Network Access Filter
  157
- Editing a Network Access Filter
  159
- Deleting a Network Access Filter
  161
- Downloadable IP Acls
  161
- About Downloadable IP Acls
  162
- Adding a Downloadable IP ACL
  164
- Editing a Downloadable IP ACL
  167
- Deleting a Downloadable IP ACL
  168
- Network Access Restrictions
  168
- About Network Access Restrictions
  169
- About IP-Based NAR Filters
  171
- About Non-IP-Based NAR Filters
  172
- Adding a Shared Network Access Restriction
  173
- Editing a Shared Network Access Restriction
  177
- Deleting a Shared Network Access Restriction
  178
- Command Authorization Sets
  179
- About Command Authorization Sets
  180
- Command Authorization Sets Description
  180
- Command Authorization Sets Assignment
  182
- Case Sensitivity and Command Authorization
  183
- Arguments and Command Authorization
  183
- About Pattern Matching
  184
- Adding a Command Authorization Set
  185
- Editing a Command Authorization Set
  187
- Deleting a Command Authorization Set
  189
- User Group Management
  191
- About User Group Setup Features and Functions
  192
- Default Group
  192
- Group TACACS+ Settings
  192
Chapter 6 User Group Management

193
Chapter 7 User Management

248
Chapter 8 System Configuration: Basic

309
- Logging
  309
- Date Format Control
  309
- Setting the Date Format
  309
- Local Password Management
  311
- Configuring Local Password Management
  313
- Cisco Secure ACS Backup
  315
- About Cisco Secure ACS Backup
  315
- Backup File Locations
  315
- Directory Management
  316
- Components Backed up
  316
- Reports of Cisco Secure ACS Backups
  316
- Backup Options
  317
- Performing a Manual Cisco Secure ACS Backup
  317
- Scheduling Cisco Secure ACS Backups
  318
- Disabling Scheduled Cisco Secure ACS Backups
  319
- Cisco Secure ACS System Restore
  320
- About Cisco Secure ACS System Restore
  320
- Backup Filenames and Locations
  320
- Components Restored
  321
- Reports of Cisco Secure ACS Restorations
  322
- Restoring Cisco Secure ACS from a Backup File
  322
- Cisco Secure ACS Active Service Management
  323
- System Monitoring
  323
- System Monitoring Options
  324
- Setting up System Monitoring
  325
- Event Logging
  326
- Setting up Event Logging
  326
- Voip Accounting Configuration
  327
- Configuring Voip Accounting
  327
- Ciscosecure Database Replication
  329
- C H a P T E R 9 System Configuration: Advanced
  330
- About Ciscosecure Database Replication
  330
- Replication Process
  332
- Replication Frequency
  335
- Important Implementation Considerations
  335
- Database Replication Versus Database Backup
  338
- Database Replication Logging
  338
- Replication Options
  339
- Replication Components Options
  339
- Outbound Replication Options
  340
- Inbound Replication Options
  343
- Implementing Primary and Secondary Replication Setups on Cisco Secure Acses
  343
- Configuring a Secondary Cisco Secure ACS
  345
- Replicating Immediately
  347
- Scheduling Replication
  349
- Disabling Ciscosecure Database Replication
  352
- RDBMS Synchronization
  353
- Database Replication Event Errors
  353
- About RDBMS Synchronization
  354
- Users
  355
- User Groups
  355
- Network Configuration
  356
- Custom RADIUS Vendors and Vsas
  356
- RDBMS Synchronization Components
  357
- About Csdbsync
  357
- About the Accountactions Table
  359
- Cisco Secure ACS Database Recovery Using the Accountactions Table
  360
- Reports and Event (Error) Handling
  361
- Preparing to Use RDBMS Synchronization
  361
- Considerations for Using CSV-Based Synchronization
  363
- Preparing for CSV-Based Synchronization
  364
- Configuring a System Data Source Name for RDBMS Synchronization
  365
- RDBMS Synchronization Options
  366
- RDBMS Setup Options
  366
- Synchronization Scheduling Options
  367
- Synchronization Partners Options
  367
- Performing RDBMS Synchronization Immediately
  368
- Scheduling RDBMS Synchronization
  369
- Disabling Scheduled RDBMS Synchronizations
  371
- IP Pools Server
  372
- About IP Pools Server
  372
- Allowing Overlapping IP Pools or Forcing Unique Pool Address Ranges
  373
- Refreshing the AAA Server IP Pools Table
  375
- Adding a New IP Pool
  375
- Editing an IP Pool Definition
  376
- Resetting an IP Pool
  377
- Deleting an IP Pool
  378
- IP Pools Address Recovery
  379
- Enabling IP Pool Address Recovery
  379
- About Certification and EAP Protocols
  381
- C H a P T E R 10 System Configuration: Authentication and Certificates
  382
- Digital Certificates
  382
- EAP-TLS Authentication
  382
- About the EAP-TLS Protocol
  383
- EAP-TLS and Cisco Secure ACS
  384
- EAP-TLS Limitations
  386
- Enabling EAP-TLS Authentication
  387
- PEAP Authentication
  388
- About the PEAP Protocol
  388
- PEAP and Cisco Secure ACS
  389
- PEAP and the Unknown User Policy
  391
- Enabling PEAP Authentication
  392
- EAP-FAST Authentication
  393
- About EAP-FAST
  393
- About Master Keys
  395
- About Pacs
  397
- Master Key and PAC Ttls
  401
- Replication and EAP-FAST
  402
- Enabling EAP-FAST
  405
- Global Authentication Setup
  406
- Authentication Configuration Options
  407
- Configuring Authentication Options
  413
- Cisco Secure ACS Certificate Setup
  414
- Installing a Cisco Secure ACS Server Certificate
  415
- Adding a Certificate Authority Certificate
  417
- Editing the Certificate Trust List
  418
- Managing Certificate Revocation Lists
  420
- About Certificate Revocation Lists
  420
- Certificate Revocation List Configuration Options
  420
- Adding a Certificate Revocation List Issuer
  420
- Editing a Certificate Revocation List Issuer
  420
- Deleting a Certificate Revocation List Issuer
  420
- Generating a Certificate Signing Request
  425
- Using Self-Signed Certificates
  427
- About Self-Signed Certificates
  427
- Self-Signed Certificate Configuration Options
  428
- Generating a Self-Signed Certificate
  429
- Updating or Replacing a Cisco Secure ACS Certificate
  430
- Logs and Reports
  434
Chapter 11 Log and Report

434
- Logging Formats
  434
- Special Logging Attributes
  434
- NAC Attributes in Logs
  436
- Update Packets in Accounting Logs
  437
- About Cisco Secure ACS Logs and Reports
  438
- Accounting Logs
  438
- Dynamic Administration Reports
  441
- Viewing the Logged-In Users Report
  442
- Deleting Logged-In Users
  443
- Viewing the Disabled Accounts Report
  444
- Cisco Secure ACS System Logs
  445
- Configuring the Administration Audit Log
  446
- Working with CSV Logs
  447
- CSV Log File Names
  447
- CSV Log File Locations
  448
- Enabling or Disabling a CSV Log
  449
- Viewing a CSV Report
  450
- Configuring a CSV Log
  451
- Working with ODBC Logs
  453
- Preparing for ODBC Logging
  454
- Configuring a System Data Source Name for ODBC Logging
  454
- Configuring an ODBC Log
  455
- Remote Logging
  458
- About Remote Logging
  458
- Implementing Centralized Remote Logging
  459
- Remote Logging Options
  460
- Enabling and Configuring Remote Logging
  461
- Disabling Remote Logging
  463
- Service Logs
  463
- Services Logged
  464
- Configuring Service Logs
  465
- Administrator Accounts
  467
- C H a P T E R 12 Administrators and Administrative Policy
  468
- About Administrator Accounts
  468
- Administrator Privileges
  469
- Adding an Administrator Account
  472
- Editing an Administrator Account
  473
- Edit Cisco Acs Administrator Account Privileges
  474
- Unlocking a Locked out Administrator Account
  476
- Deleting an Administrator Account
  477
- Access Policy
  477
- Access Policy Options
  478
- Setting up Access Policy
  480
- Session Policy
  482
- Session Policy Options
  482
- Setting up Session Policy
  483
- Audit Policy
  484
Chapter 13 User Database

486
Chapter 14 Network Admission Control

575
- Posture Tokens
  576
- Non-Responsive NAC-Client Computers
  577
- Implementing Network Admission Control
  577
- NAC Databases
  582
- About NAC Databases
  582
- About NAC Credentials and Attributes
  583
- NAC Database Configuration Options
  584
- Policy Selection Options
  585
- Configuring a NAC Database
  586
- NAC Policies
  588
- Local Policies
  589
- About Local Policies
  590
- About Rules, Rule Elements, and Attributes
  591
- Local Policy Configuration Options
  594
- Rule Configuration Options
  596
- Creating a Local Policy
  597
- External Policies
  600
- About External Policies
  600
- External Policy Configuration Options
  601
- Creating an External Policy
  604
- Editing a Policy
  606
- Deleting a Policy
  608
- Unknown User Policy
  611
- Known, Unknown, and Discovered Users
  611
- Authentication and Unknown Users
  611
Chapter 15 Unknown User Policy

613
Appendix

645
- A Troubleshooting
  646
- Administration Issues
  646
Appendix A Troubleshooting

647
- Browser Issues
  648
- Cisco IOS Issues
  649
- Database Issues
  651
- Dial-In Connection Issues
  654
- Debug Issues
  658
- Proxy Issues
  659
- Installation and Upgrade Issues
  660
- Maxsessions Issues
  660
- Report Issues
  661
- Third-Party Server Issues
  663
- User Authentication Issues
  664
- TACACS+ and RADIUS Attribute Issues
  666
Appendix

667
- TACACS+ Attribute-Value Pairs
  667
- Cisco IOS AV Pair Dictionary
  667
Appendix B TACAC+ Attribute-Value Pair

668
- TACACS+ AV Pairs
  668
- TACACS+ Accounting AV Pairs
  670
Appendix

673
- RADIUS Attributes
  673
- Cisco IOS Dictionary of RADIUS AV Pairs
  675
Appendix C RADIU Attribute

675
Appendix

717
Appendix D Csutil Database Utility

718
- Csutil Database Utility
  719
- Csutil.exe Options
  719
- Displaying Command-Line Syntax
  721
- Backing up Cisco Secure ACS with Csutil.exe
  722
- Restoring Cisco Secure ACS with Csutil.exe
  723
- Creating a Ciscosecure User Database
  724
- Creating a Cisco Secure ACS Database Dump File
  726
- Loading the Cisco Secure ACS Database from a Dump File
  727
- Compacting the Ciscosecure User Database
  728
- User and AAA Client Import Option
  730
- Importing User and AAA Client Information
  731
- User and AAA Client Import File Format
  732
- About User and AAA Client Import File Format
  733
- ONLINE or OFFLINE Statement
  733
- ADD Statements
  734
- UPDATE Statements
  735
- DELETE Statements
  737
- ADD_NAS Statements
  737
- DEL_NAS Statements
  739
- Import File Example
  740
- Exporting User List to a Text File
  740
- Exporting Group Information to a Text File
  741
- Exporting Registry Information to a Text File
  742
- Decoding Error Numbers
  743
- Recalculating CRC Values
  744
- User-Defined RADIUS Vendors and VSA Sets
  744
- About User-Defined RADIUS Vendors and VSA Sets
  745
- Adding a Custom RADIUS Vendor and VSA Set
  745
- Deleting a Custom RADIUS Vendor and VSA Set
  747
- Listing Custom RADIUS Vendors
  748
- Exporting Custom RADIUS Vendor and VSA Sets
  749
- RADIUS Vendor/Vsa Import File
  750
- About the RADIUS Vendor/Vsa Import File
  750
- Vendor and VSA Set Definition
  751
- Attribute Definition
  752
- Enumeration Definition
  754
- Example RADIUS Vendor/Vsa Import File
  755
- PAC File Generation
  756
- PAC File Options and Examples
  757
- Generating PAC Files
  759
- Posture Validation Attributes
  760
- Posture Validation Attribute Definition File
  760
- Exporting Posture Validation Attribute Definitions
  764
- Importing Posture Validation Attribute Definitions
  765
- Deleting a Posture Validation Attribute Definition
  767
- Default Posture Validation Attribute Definition File
  768
Appendix

781
- VPDN Processing
  781
- VPDN Process
  781
Appendix

787
Appendix

825
- G Internal Architecture
  825
- Windows Services
  825
- Windows Registry
  825
- Csadmin
  826
- Csauth
  827
- Csdbsync
  828
- Cslog
  828
- Csmon
  828
- Monitoring
  829
- Recording
  830
- Notification
  831
- Response
  831
- Cstacacs and Csradius
  832

Cisco Secure Access Control Server Configuration Manual (82 pages)

ASA 5500 Series Adaptive Security Appliance

Brand: Cisco | Category: Software | Size: 1.5 MB

Cisco Categories

Switch IP Phone

Network Router Wireless Access Point Conference System

More Cisco Manuals

Cisco Secure Access Control Server Manuals

Cisco Secure Access Control Server User Manual (860 pages)

Table of Contents

Chapter 2 Deployment Considerations

Chapter 3 Interface Configuration

Chapter 4 Network Configuration

Chapter 5 Shared Profile Component

Chapter 6 User Group Management

Chapter 7 User Management

Chapter 8 System Configuration: Basic

Chapter 11 Log and Report

Chapter 13 User Database

Chapter 14 Network Admission Control

Chapter 15 Unknown User Policy

Appendix

Appendix A Troubleshooting

Appendix

Appendix B TACAC+ Attribute-Value Pair

Appendix

Appendix C RADIU Attribute

Appendix

Appendix D Csutil Database Utility

Appendix

Appendix

Appendix

Cisco Secure Access Control Server Configuration Manual (82 pages)

Table of Contents

About this Guide

Chapter 1 Installing or Upgrading the CSD Software

Chapter 2 Enabling and Disabling CSD

Chapter 3 Introduction

Chapter 4 Tutorial

Work

Home

Work

Home

Work

Home

Chapter 5 Setting up CSD for Microsoft Windows Clients

Chapter 6 Setting up CSD for Microsoft Windows CE Clients

Chapter 7 Setting up CSD for Macintosh and Linux Clients

Appendix

Frequently Asked Questions

Related Products

Cisco Categories