Cisco Systems OL-9971-01 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Cisco Systems OL-9971-01, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Cisco Systems OL-9971-01 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Cisco Systems OL-9971-01. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Cisco Systems OL-9971-01 should contain:
- informations concerning technical data of Cisco Systems OL-9971-01
- name of the manufacturer and a year of construction of the Cisco Systems OL-9971-01 item
- rules of operation, control and maintenance of the Cisco Systems OL-9971-01 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Cisco Systems OL-9971-01 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Cisco Systems OL-9971-01, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Cisco Systems service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Cisco Systems OL-9971-01.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Cisco Systems OL-9971-01 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    CHAPTER 3-1 User Guide for Cisco Secure Access Control Server OL-9971-01 3 Network Configuration This chapter details concepts and procedures for conf iguring the Cisco Secure Access Control Server Release 4.1, hereafter referred to as A CS. Y ou use the conf iguration process to establish a distributed system, and set up interaction with authentic[...]

  • Page 2

    3-2 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration About ACS in Distributed Systems • Remote Agents (A CS Solution Engine)—This table lists each remote agent that is conf igured together with its IP address and av ailable services. For more information about remote agents, see About Remote Agents, p[...]

  • Page 3

    3-3 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems These types of access control hav e unique authentication and authorization requirements. With A CS, system administrators can use a variety of authentication methods that are used with dif ferent degrees of authorization pr[...]

  • Page 4

    3-4 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems An Example This section presents a scenario of proxy that is used in an enterprise system. Mary is an employee with an of f ice in the corporate headquarters in Los Angeles. Her username is mary@la.corporate .com . When Mary[...]

  • Page 5

    3-5 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems continues, in order , down the list, until the AAA servers handles the authentication request. (F ailed connections are detected by failure of the nominated server to respond within a specif ied time period. That is, the req[...]

  • Page 6

    3-6 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • Sending the accounting information to the remote AAA server also enables you to use the Max Sessions feature. The Max Sessions feature uses the Start and Stop records in the accounting packet. If the remote AAA server is an A[...]

  • Page 7

    3-7 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • T ype —The device type, as specif ied by the AAA protocol that it is conf igured to use, or the kind of AAA server it is. Y ou can also search for Solution Engine remote agents. If you do not want to limit the search based [...]

  • Page 8

    3-8 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 6 If you want to do wnload a f ile containing the search results in a comma-separated value format, click Download , and use your bro wser to save the f ile to a location and f ilename of your choice. Step 7 If you want to s[...]

  • Page 9

    3-9 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – Number —Y ou can specify a number, for e xample, 10.3.157.98. – Numeric Range —Y ou can specify the low and high numbers of the range in the octet, separated by a hyphen (-), for example, 10.3.157.10-50. – Wildcard ?[...]

  • Page 10

    3-10 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients The Authenticate Using list always contains: – T A CA CS+ (Cisco IOS) —The Cisco IOS T A CACS+ protocol, which is the standard choice when using Cisco Systems access servers, routers, and f irewalls. If the AAA client is a C[...]

  • Page 11

    3-11 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – RADIUS (Nortel) —RADIUS using Nortel RADIUS VSAs. Select this option if the network de vice is a Nortel network de vice that supports authentication via RADIUS. – RADIUS (iPass) —RADIUS for AAA clients using iPass RADI[...]

  • Page 12

    3-12 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients T o add AAA clients: Step 1 In the navigation bar , click Network Conf iguration . The Network Conf iguration page opens. Step 2 Do one of the follo wing: • If you are using NDGs, click the name of the NDG to which you want to[...]

  • Page 13

    3-13 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA client is assigned. Then, click the name of the AAA client. • T o edit AAA clients when you have not enabled NDGs, click the[...]

  • Page 14

    3-14 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Deleting AAA Clients T o delete AAA clients: Step 1 In the navigation bar , click Network Conf iguration . The Network Conf iguration page opens. Step 2 Do one of the follo wing: • If you are using NDGs, click the name of the [...]

  • Page 15

    3-15 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Deleting AAA Servers, page 3-18 AAA Server Configuration Options AAA server conf igurations enable ACS to interact with the AAA serv er that the conf iguration represents. AAA servers that do not ha ve a corresponding conf i[...]

  • Page 16

    3-16 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Log Update/W atchdog Pack ets from this remote AAA Serv er —Enables logging of update or watchdog packets from AAA clients that are forw arded by the remote AAA server to this A CS. W atchdog packets are interim packets th[...]

  • Page 17

    3-17 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA server is to be assigned. Then, click Add Entry belo w the [name] AAA Servers table. • T o add AAA servers when you hav e no[...]

  • Page 18

    3-18 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Step 3 Enter or change AAA server settings, as needed. F or information about the conf iguration options av ailable for the AAA server , see AAA Server Conf iguration Options, page 3-15 . Step 4 T o [...]

  • Page 19

    3-19 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) This section contains the following topics: • About Remote Agents, page 3-19 • Remote Agent Conf iguration Options, page 3-19 • Adding a Remote Agent, page 3-20 • Editing a Remote Agent Conf [...]

  • Page 20

    3-20 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Note If the port number that you provide does not match the port the remote agent that you conf igured for listening, A CS cannot communicate with the remote agent. For information about conf iguring[...]

  • Page 21

    3-21 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) The Add Remote Agent page appears. Step 3 In the Remote Agent Name box, type a name for the remote agent (up to 32 characters). Step 4 In the Remote Agent IP Address box, type the IP address of the c[...]

  • Page 22

    3-22 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) T o edit a remote agent conf iguration: Step 1 In the navigation bar , click Network Conf iguration . The Network Conf iguration section opens. Step 2 Perform one of the following steps, based on you[...]

  • Page 23

    3-23 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 Perform one of the following steps, based on your use of NDGs: a. If you are using NDGs, click the name of the NDG to which the remote agent belongs. Then, in the NDG Remote Agents table, click the name of the r[...]

  • Page 24

    3-24 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Adding a Network Device Group Y ou can assign users or groups of users to NDGs. For more information, see: • Setting T A CACS+ Enable P assword Options for a User , page 6-23 • Setting Enable Privile ge Options for[...]

  • Page 25

    3-25 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Note Y ou must enable the Ke y Wrap feature in the N AP Authentication Settings page to implement these shared keys in EAP-TLS authentication. Step 6 Click Submit . The Network De vice Groups table displays the new NDG[...]

  • Page 26

    3-26 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 In the Network De vice Groups table, click the name of the current group of the network device. Step 3 In the AAA Clients table or AAA Servers table, as applicable, click the name of the client or serv er that y[...]

  • Page 27

    3-27 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Deleting a Network Device Group When you delete an NDG, all AAA clients and AAA servers that belong to the deleted group appear in the Not Assigned AAA Clients or Not Assigned AAA Servers table. Ti p It might be us[...]

  • Page 28

    3-28 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables About the Proxy Distribution Table If you enabled the Distributed Systems Settings, when you click Netw ork Conf iguration, you will see the Proxy Distribution T able. Ti p T o enable Distributed Systems Settings i[...]

  • Page 29

    3-29 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 5 From the Strip list, select Ye s to strip the character string from the username that you entered, or select No to leav e it. Step 6 In the AAA Servers column, select the AAA serv er that you want to use for[...]

  • Page 30

    3-30 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 3 Select the character string entry to reorder , and then click Up or Down to mov e its position to ref lect the search order that you want. Step 4 When you f inish sorting, click Submit or Submit + A pply . E[...]