Cisco 2509 - Router - EN User Manual page 470

Token Server User Databases
Under External User Database Configuration, select the name of the
Step 5
RADIUS-enabled token server you need to configure.
Note
Step 6 Click Configure.
In the RADIUS Configuration table, type the required information in the
Step 7
following boxes:
User Guide for Cisco Secure ACS for Windows Server
11-62
If only one RADIUS-enabled token server configuration exists, the name
of that configuration appears instead of the list. Proceed to Step 6.
Primary Server Name/IP—The hostname or IP address of the primary
•
RADIUS token server. If you provide the hostname, the hostname must be
resolvable by DNS.
• Secondary Server Name/IP—The hostname or IP address of the secondary
RADIUS token server. If you provide the hostname, the hostname must be
resolvable by DNS.
Shared Secret—The shared secret of the RADIUS server. This must be
•
identical to the shared secret with which the RADIUS token server is
configured.
• Authentication Port—The UDP port over which the RADIUS server
conducts authentication sessions. If the RADIUS token server is installed on
the same Windows server as Cisco Secure ACS, this port should not be the
same port used by Cisco Secure ACS for RADIUS authentication. For more
information about the ports used by Cisco Secure ACS for RADIUS, see
RADIUS, page 1-6.
For Cisco Secure ACS to send RADIUS OTP messages to a
Note
RADIUS-enabled token server, you must ensure that gateway devices
between the RADIUS-enabled token server and Cisco Secure ACS
allow communication over the UDP port specified in the
Authentication Port box.
• Timeout (seconds):—The number of seconds Cisco Secure ACS waits for a
response from the RADIUS token server before retrying the authentication
request.
Chapter 11 Working with User Databases
78-14696-01, Version 3.1