Table of Contents
Advertisement
Configuring RADIUS attributes
The RADIUS attributes required for NAC must be globally enabled on the Cisco
Secure ACS.
1. Select Interface Configuration from the main menu (Figure 7-13 on
page 230), then select RADIUS (IETF) (Figure 7-19).
Figure 7-19 Global IETF RADIUS attributes
For L2Dot1x NAC, you must select the following:
– [027] Session-Timeout
– [029] Termination-Action
– [064] Tunnel-type
– [065] Tunnel-Medium-Type
– [081] Tunnel-Private-Group-ID
After selecting just these items, click Submit. This will take you back to the
screen shown in Figure 7-13 on page 230.
236
Building a Network Access Control Solution with IBM Tivoli and Cisco Systems
Note: 64, 65, and 81 are required for VLAN assignment.
Advertisement
Table of Contents
