Cisco Catalyst 6500 Series Configuration Manual page 10

Contents
Configuring Application Protocol Inspection
13
C H A P T E R
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
x
Identifying a AAA Server
Configuring Authentication for CLI Access
Configuring Authentication to Access Privileged Mode
Configuring Authentication for the enable Command
Authenticating Users Using the login Command
Configuring Command Authorization
Command Authorization Overview
Configuring Local Command Authorization
Local Command Authorization Prerequisites
Default Command Privilege Levels
Assigning Privilege Levels to Commands and Enabling Authorization
Viewing Command Privilege Levels
Configuring TACACS+ Command Authorization
TACACS+ Command Authorization Prerequisites
Configuring Commands on the TACACS+ Server
Enabling TACACS+ Command Authorization
Viewing the Current Logged-In User
Recovering from a Lockout
Configuring Authentication for Network Access
Authentication Overview
Enabling Network Access Authentication
Enabling Secure Authentication of Web Clients
Configuring Authorization for Network Access
Configuring TACACS+ Authorization
Configuring RADIUS Authorization
Configuring the RADIUS Server to Download Per-User Access Control Lists
Configuring the RADIUS Server to Download Per-User Access Control List Names
Configuring Accounting for Network Access
Inspection Engine Overview
When to Use Application Protocol Inspection
Inspection Limitations
Inspection Support
13-2
Configuring an Inspection Engine
Detailed Information About Inspection Engines
CUSeeMe Inspection Engine
DNS over UDP Inspection Engine
12-6
12-8
12-9
12-10
12-10
12-10
12-11
12-13
12-13
12-18
12-19
12-20
12-20
12-21
12-22
12-23
12-24
12-25
12-27
13-1
13-1
13-1
13-2
13-4
13-5
13-5
13-6
12-8
12-9
12-11
12-11
12-14
12-14
12-17
12-25
12-27
OL-6392-01