Configuring A Leap Proxy Radius Server External User Database - Cisco 2509 - Router - EN User Manual

Chapter 11 Working with User Databases
Note

Configuring a LEAP Proxy RADIUS Server External User Database

Step 1
Step 2
Step 3
78-14696-01, Version 3.1
The third-party RADIUS server must return Microsoft Point-to-Point Encryption
(MPPE) keys in the Microsoft RADIUS vendor-specific attribute (VSA)
MSCHAP-MPPE-Keys (VSA 12). If the third-party RADIUS server does not
return the MPPE keys, the authentication fails and is logged in the Failed
Attempts log.
Cisco Secure ACS supports RADIUS-based group specification for users
authenticated by LEAP Proxy RADIUS Server databases. RADIUS-based group
specification overrides group mapping. For more information, see
RADIUS-Based Group Specification, page
Cisco Secure ACS supports group mapping for unknown users authenticated by
LEAP Proxy RADIUS Server databases. Group mapping is only applied to an
unknown user if RADIUS-based group specification did not occur. For more
information about group mapping users authenticated by a LEAP Proxy RADIUS
Server database, see Group Mapping by External User Database, page
You should install and configure your proxy RADIUS server before configuring
Cisco Secure ACS to authenticate users with it. For information about installing
the proxy RADIUS server, refer to the documentation included with your
RADIUS server.
To configure LEAP proxy RADIUS authentication, follow these steps:
In the navigation bar, click External User Databases.
Click Database Configuration.
Result: Cisco Secure ACS lists all possible external user database types.
Click LEAP Proxy RADIUS Server.
Result: If no LEAP Proxy RADIUS Server configuration exists, only the Database
Configuration Creation table appears. Otherwise, in addition to the Database
Configuration Creation table, the External User Database Configuration table
appears.
12-22.
User Guide for Cisco Secure ACS for Windows Server
LEAP Proxy RADIUS Server Database
12-12.
11-55