Aaa Server Functions And Concepts - Cisco Servers User Manual

AAA Server Functions and Concepts

AAA Server Functions and Concepts
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
1-4
When you install Cisco Secure ACS on your server, the installation adds several
Windows services. The services provide the core of Cisco Secure ACS
functionality. For a full discussion of each service, see the
Internal Architecture" section on page
your Cisco Secure ACS server include the following:
CSAdmin—Provides the HTML interface for administration of
•
Cisco Secure ACS.
CSAuth—Provides authentication services.
•
• CSDBSync—Provides synchronization of the CiscoSecure user database
with an external RDBMS application.
CSLog—Provides logging services, both for accounting and system activity.
•
• CSMon—Provides monitoring, recording, and notification of
Cisco Secure ACS performance, and includes automatic response to some
scenarios.
CSTacacs—Provides communication between TACACS+ AAA clients and
•
the CSAuth service.
CSRadius—Provides communication between RADIUS AAA clients and
•
the CSAuth service.
Each module can be started and stopped individually from within the Microsoft
Service Control Panel or as a group from within the Cisco Secure ACS HTML
interface. For information about stopping and starting Cisco Secure ACS
services, see the "Service Control" section on page
Cisco Secure ACS is a AAA server, providing authentication, authorization, and
accounting services to network devices that can act as AAA clients.
As a AAA server, Cisco Secure ACS incorporates many technologies to render
AAA services to AAA clients. Understanding Cisco Secure ACS requires
knowledge of many of these technologies. To address the most significant aspects,
this section contains the following topics:
Cisco Secure ACS and the AAA Client, page 1-5
•
• AAA Protocols—TACACS+ and RADIUS, page 1-5
Authentication, page 1-7
•
Chapter 1 Overview of Cisco Secure ACS
"Cisco Secure ACS
H-1. The Cisco Secure ACS services on
8-2.
78-13751-01, Version 3.0