Cisco Secure ACS 3.0 Manuals

Manuals and User Guides for Cisco Secure ACS 3.0. We have 1 Cisco Secure ACS 3.0 manual available for free PDF download: User Manual

Cisco Secure ACS 3.0 User Manual (654 pages)

for Windows 2000/NT Servers

Brand: Cisco | Category: Software | Size: 5.3 MB

Version
2
- Table of Contents
  4
- Who Should Read this Guide
  27
- How this Guide Is Organized
  28
- System Messages
  29
- Conventions Used in this Guide
  30
- Related Documentation
  31
- Obtaining Documentation
  32
- World Wide Web
  32
- Documentation Feedback
  33
- Obtaining Technical Assistance
  33
AAA Server Functions and Concepts
40
- Cisco Secure ACS and the AAA Client
  41
- AAA Protocols-TACACS+ and RADIUS
  41
  - Radius
    42
  - Tacacs
    42
- Authentication
  43
- Authorization
  51
  - Dynamic Usage Quotas
    52
  - Max Sessions
    52
  - Other Authorization-Related Features
    53
- Accounting
  53
  - Other Accounting-Related Features
    54
- Administration
  54
Cisco Secure ACS HTML Interface
57
Chapter 2 Deploying Cisco Secure ACS

67
- Basic Deployment Requirements for Cisco Secure ACS
  68
  - System Requirements
    68
    
    Hardware Requirements
    68
    
    Operating System Requirements
    68
    
    Third-Party Software Requirements
    69
  - Network Requirements
    70
- Basic Deployment Factors for Cisco Secure ACS
  70
  - Network Topology
    71
    
    Dial-Up Topology
    71
    
    Wireless Network
    74
    
    Remote Access Using VPN
    77
  - Remote Access Policy
    79
  - Security Policy
    80
  - Administrative Access Policy
    80
    
    Separation of Administrative and General Users
    82
  - Database
    83
    
    Number of Users
    83
    
    Type of Database
    83
  - Network Speed and Reliability
    84
- Suggested Deployment Sequence
  84
Chapter 3 Setting up the Cisco Secure ACS HTML Interface

89
CHAPTER 4 Setting up and Managing Network Configuration

109
Chapter 5 Setting up and Managing Shared Profile Components

139
- Downloadable PIX Acls
  140
  - About Downloadable PIX Acls
    140
  - Downloadable PIX ACL Configuration
    141
    
    Adding a Downloadable PIX ACL
    141
    
    Editing a Downloadable PIX ACL
    142
    
    Deleting a Downloadable PIX ACL
    143
- Network Access Restrictions
  144
  - About Network Access Restrictions
    144
  - Shared Network Access Restrictions Configuration
    145
    
    Adding a Shared Network Access Restriction
    145
    
    Deleting a Shared Network Access Restriction
    145
    
    Editing a Shared Network Access Restriction
    145
- Command Authorization Sets
  150
Chapter 6 Setting up and Managing User Groups

157
Chapter 7 Setting up and Managing User Accounts

207
CHAPTER 8 Establishing Cisco Secure ACS System Configuration

264
- Service Control
  264
  - Determining the Status of Cisco Secure ACS Services
    264
  - Stopping, Starting, or Restarting Services
    264
- Logging
  265
- Date Format Control
  265
  - Setting the Date Format
    266
- Password Validation
  266
  - Setting Password Validation Options
    267
- Ciscosecure Database Replication
  268
- RDBMS Synchronization
  286
- Cisco Secure ACS Backup
  302
  - About Cisco Secure ACS Backup
    302
  - Backup File Locations
    303
  - Directory Management
    303
  - Components Backed up
    303
  - Reports of Cisco Secure ACS Backups
    304
  - Performing a Manual Cisco Secure ACS Backup
    304
  - Scheduling Cisco Secure ACS Backups
    305
  - Disabling Scheduled Cisco Secure ACS Backups
    306
- Cisco Secure ACS System Restore
  307
- Cisco Secure ACS Active Service Management
  310
  - System Monitoring
    311
    
    System Monitoring Options
    311
    
    Setting up System Monitoring
    312
  - Event Logging
    313
    
    Setting up Event Logging
    313
- IP Pools Server
  314
- IP Pools Address Recovery
  321
CHAPTER 9 Working with Logging and Reports

338
- Special Logging Attributes
  338
- Update Packets in Accounting Logs
  339
- About Cisco Secure ACS Logs and Reports
  340
  - Accounting Logs
    340
  - Passed Authentications Log
    346
- Dynamic Cisco Secure ACS Administration Reports
  346
  - Logged-In Users Report
    347
  - Disabled Accounts Report
    350
- Cisco Secure ACS System Logs
  351
  - ACS Backup and Restore Log
    351
  - RDBMS Synchronization Log
    352
  - Database Replication Log
    352
  - Administration Audit Log
    353
  - ACS Service Monitoring Log
    354
- Working with CSV Logs
  355
  - CSV Log File Names
    355
  - Enabling or Disabling a CSV Log
    355
    
    Failed Attempts Log
    356
    
    RADIUS Accounting Log
    356
    
    TACACS+ Accounting Log
    356
    
    TACACS+ Administration Log
    356
    
    Voip Accounting Log
    356
  - Viewing a CSV Report
    356
  - Configuring a CSV Log
    358
- Working with ODBC Logs
  361
- Remote Logging
  365
  - About Remote Logging
    366
  - Remote Logging Options
    367
  - Configuring a Central Logging Server
    367
  - Enabling and Configuring Remote Logging
    368
  - Disabling Remote Logging
    369
- Service Logs
  370
  - Services Logged
    370
  - Configuring Service Logs
    371
CHAPTER 10 Setting up and Managing Administrators and Policy

375
- Administrator Accounts
  375
- Access Policy
  384
  - Access Policy Options
    384
  - Setting up Access Policy
    386
- Session Policy
  387
  - Session Policy Options
    387
  - Setting up Session Policy
    388
- Audit Policy
  390
Chapter 11 Working with User Database

392
CHAPTER 12 Administering External User Databases

451
- Unknown User Processing
  451
- Database Group Mappings
  460
  - Group Mapping by External User Database
    460
    
    Creating a Cisco Secure ACS Group Mapping for a Token Server, ODBC Database, or LEAP Proxy RADIUS Server Database
    462
  - Group Mapping by Group Set Membership
    463
    
    Group Mapping Order
    463
    
    Default Group Mapping for Windows NT/2000
    464
    
    No Access Group for Group Set Mappings
    464
    
    Creating a Cisco Secure ACS Group Mapping for Windows NT/2000, Novell NDS, or Generic LDAP Groups
    465
    
    Mapping
    465
    
    Mapping
    467
    
    Deleting a Windows NT/2000 Domain Group Mapping Configuration
    469
    
    Changing Group Set Mapping Order
    470
    
    RADIUS-Based Group Specification
    471
Appendix

473
Troubleshooting Information for Cisco Secure ACS

473
- Administration Issues
  474
- A P P E N D I X a Troubleshooting Information for Cisco Secure ACS
  475
- Browser Issues
  475
- Cisco IOS Issues
  476
- Database Issues
  477
- Dial-In Connection Issues
  478
- Debug Issues
  483
- Proxy Issues
  484
- Installation and Upgrade Issues
  485
- Maxsessions Issues
  485
- Report Issues
  486
- Third-Party Server Issues
  487
- PIX Firewall Issues
  488
- User Authentication Issues
  488
- TACACS+ and RADIUS Attribute Issues
  490
Appendix

491
System Messages

491
- Windows NT/2000 Event Log Service Startup Errors
  491
  - System Monitored Events
    492
- Replication Messages
  496
- Failed Attempts Messages
  499
Appendix

501
TACACS+ Attribute-Value Pairs

501
- Cisco IOS Attribute-Value Pair Dictionary
  501
  - TACACS+ AV Pairs
    502
  - TACACS+ Accounting AV Pairs
    504
Appendix

505
Appendix

537
Cisco Secure ACS Command-Line Database Utility

537
- A P P E N D I X E Cisco Secure ACS Command-Line Database Utility
  538
- Csutil.exe Syntax
  538
- Location of Csutil.exe and Related Files
  538
- Csutil.exe Options
  539
- Backing up Cisco Secure ACS with Csutil.exe
  541
- Restoring Cisco Secure ACS with Csutil.exe
  542
- Creating a Ciscosecure User Database
  543
- Creating a Cisco Secure ACS Database Dump File
  545
- Loading the Cisco Secure ACS Database from a Dump File
  546
- Compacting the Ciscosecure User Database
  547
- User and AAA Client Import Option
  549
  - Importing User and AAA Client Information
    549
  - User and AAA Client Import File Format
    549
    
    About User and AAA Client Import File Format
    551
    
    ADD Statements
    552
    
    ONLINE or OFFLINE Statement
    552
    
    UPDATE Statements
    554
    
    ADD_NAS Statements
    556
    
    DELETE Statements
    556
    
    DEL_NAS Statements
    558
    
    Import File Examples
    558
- Exporting User List to a Text File
  559
- Exporting Group Information to a Text File
  560
- Decoding Error Numbers
  561
- Exporting Registry Information to a Text File
  561
- Recalculating CRC Values
  562
- User-Defined RADIUS Vendors and VSA Sets
  563
Appendix

575
Cisco Secure ACS and Virtual Private Dial-Up Networks

575
- VPDN Process
  575
- A P P E N D I X F Cisco Secure ACS and Virtual Private Dial-Up Networks
  576
ODBC Import Definitions

582
Appendix G ODBC Import Definition

583
- Accountactions Table Mandatory Fields
  583
- Accountactions Table Processing Order
  584
Appendix

619
Cisco Secure ACS Internal Architecture

619
- Windows NT/2000 Environment Overview
  620
  - Windows NT/2000 Services
    620
  - Windows NT/2000 Registry
    620
- Cisco Secure ACS Web Server
  620
- Csadmin
  621
- Csauth
  621
- Csdbsync
  624
- Cslog
  624
- Csmon
  625
  - Monitoring
    625
  - Recording
    627
    
    Sample Scripts
    628
  - Configuration
    628
- Cstacacs and Csradius
  629

Cisco Categories

Switch IP Phone

Network Router Wireless Access Point Conference System

More Cisco Manuals

Cisco Secure ACS 3.0 Manuals

Cisco Secure ACS 3.0 User Manual (654 pages)

Table of Contents

Chapter 2 Deploying Cisco Secure ACS

Chapter 3 Setting up the Cisco Secure ACS HTML Interface

CHAPTER 4 Setting up and Managing Network Configuration

Chapter 5 Setting up and Managing Shared Profile Components

Chapter 6 Setting up and Managing User Groups

Chapter 7 Setting up and Managing User Accounts

CHAPTER 8 Establishing Cisco Secure ACS System Configuration

CHAPTER 9 Working with Logging and Reports

CHAPTER 10 Setting up and Managing Administrators and Policy

Chapter 11 Working with User Database

CHAPTER 12 Administering External User Databases

Appendix

Troubleshooting Information for Cisco Secure ACS

Appendix

System Messages

Appendix

TACACS+ Attribute-Value Pairs

Appendix

Appendix

Cisco Secure ACS Command-Line Database Utility

Appendix

Cisco Secure ACS and Virtual Private Dial-Up Networks

ODBC Import Definitions

Appendix G ODBC Import Definition

Appendix

Cisco Secure ACS Internal Architecture

Related Products

Cisco Categories