Cisco 3.3 User Manual page 130

AAA Client Configuration
User Guide for Cisco Secure ACS for Windows Server
4-14
When an authentication request from a RADIUS (Cisco Aironet) AAA
client arrives, Cisco Secure ACS first attempts authentication by using
LEAP; if this fails, Cisco Secure ACS fails over to EAP-TLS. If LEAP is
not enabled on the Global Authentication Setup page, Cisco Secure ACS
immediately attempts EAP-TLS authentication. If neither LEAP nor
EAP-TLS are enabled on the Global Authentication Setup, any
authentication attempt received from a Cisco Aironet RADIUS client
fail. For more information about enabling LEAP or EAP-TLS, see
Authentication Setup, page
Using this option enables Cisco Secure ACS to send the wireless network
device a different session timeout value for user sessions than
Cisco Secure ACS sends to wired end-user clients.
If all authentication requests from a particular Cisco Aironet Access
Note
Point are PEAP or EAP-TLS requests, use RADIUS (IETF) instead
of RADIUS (Cisco Aironet). Cisco Secure ACS cannot support PEAP
authentication using the RADIUS (Cisco Aironet) protocol.
RADIUS (Cisco BBMS)—RADIUS using Cisco BBMS VSAs. Select
–
this option if the network device is a Cisco BBMS network device
supporting authentication via RADIUS.
RADIUS (Cisco IOS/PIX)—RADIUS using Cisco IOS/PIX VSAs. This
–
option enables you to pack commands sent to a Cisco IOS AAA client.
The commands are defined in the Group Setup section. Select this option
for RADIUS environments in which key TACACS+ functions are
required to support Cisco IOS equipment.
RADIUS (Cisco VPN 3000)—RADIUS using Cisco VPN 3000 VSAs.
–
Select this option if the network device is a Cisco VPN 3000 series
Concentrator.
RADIUS (Cisco VPN 5000)—RADIUS using Cisco VPN 5000 VSAs.
–
Select this option if the network device is a Cisco VPN 5000 series
Concentrator.
RADIUS (IETF)—IETF-standard RADIUS, using no VSAs. Select this
–
option if the AAA client represents RADIUS-enabled devices from more
than one manufacturer and you want to use standard IETF RADIUS
Chapter 4
10-26.
Network Configuration
Global
78-16592-01