Manuale d’uso / di manutenzione del prodotto OL-9971-01 del fabbricante Cisco Systems
Vai alla pagina of 30
CHAPTER 3-1 User Guide for Cisco Secure Access Control Server OL-9971-01 3 Network Configuration This chapter details concepts and procedures for conf iguring the Cisco Secure Access Control Server Release 4.
3-2 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration About ACS in Distributed Systems • Remote Agents (A CS Solution Engine)—This table lists each remote agent that is conf igured together with its IP address and av ailable services.
3-3 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems These types of access control hav e unique authentication and authorization requirements.
3-4 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems An Example This section presents a scenario of proxy that is used in an enterprise system. Mary is an employee with an of f ice in the corporate headquarters in Los Angeles.
3-5 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Proxy in Distributed Systems continues, in order , down the list, until the AAA servers handles the authentication request. (F ailed connections are detected by failure of the nominated server to respond within a specif ied time period.
3-6 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • Sending the accounting information to the remote AAA server also enables you to use the Max Sessions feature. The Max Sessions feature uses the Start and Stop records in the accounting packet.
3-7 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Network Device Searches • T ype —The device type, as specif ied by the AAA protocol that it is conf igured to use, or the kind of AAA server it is. Y ou can also search for Solution Engine remote agents.
3-8 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 6 If you want to do wnload a f ile containing the search results in a comma-separated value format, click Download , and use your bro wser to save the f ile to a location and f ilename of your choice.
3-9 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – Number —Y ou can specify a number, for e xample, 10.3.157.98. – Numeric Range —Y ou can specify the low and high numbers of the range in the octet, separated by a hyphen (-), for example, 10.
3-10 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients The Authenticate Using list always contains: – T A CA CS+ (Cisco IOS) —The Cisco IOS T A CACS+ protocol, which is the standard choice when using Cisco Systems access servers, routers, and f irewalls.
3-11 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients – RADIUS (Nortel) —RADIUS using Nortel RADIUS VSAs. Select this option if the network de vice is a Nortel network de vice that supports authentication via RADIUS.
3-12 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients T o add AAA clients: Step 1 In the navigation bar , click Network Conf iguration .
3-13 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Clients Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA client is assigned. Then, click the name of the AAA client.
3-14 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Deleting AAA Clients T o delete AAA clients: Step 1 In the navigation bar , click Network Conf iguration . The Network Conf iguration page opens.
3-15 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Deleting AAA Servers, page 3-18 AAA Server Configuration Options AAA server conf igurations enable ACS to interact with the AAA serv er that the conf iguration represents.
3-16 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers • Log Update/W atchdog Pack ets from this remote AAA Serv er —Enables logging of update or watchdog packets from AAA clients that are forw arded by the remote AAA server to this A CS.
3-17 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring AAA Servers Step 2 Do one of the following: • If you are using NDGs, click the name of the NDG to which the AAA server is to be assigned. Then, click Add Entry belo w the [name] AAA Servers table.
3-18 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Step 3 Enter or change AAA server settings, as needed. F or information about the conf iguration options av ailable for the AAA server , see AAA Server Conf iguration Options, page 3-15 .
3-19 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) This section contains the following topics: • A.
3-20 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) Note If the port number that you provide does not match the port the remote agent that you conf igured for listening, A CS cannot communicate with the remote agent.
3-21 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) The Add Remote Agent page appears. Step 3 In the Remote Agent Name box, type a name for the remote agent (up to 32 characters).
3-22 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Remote Agents (ACS Solution Engine Only) T o edit a remote agent conf iguration: Step 1 In the navigation bar , click Network Conf iguration .
3-23 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 Perform one of the following steps, based on your use of NDGs: a. If you are using NDGs, click the name of the NDG to which the remote agent belongs.
3-24 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Adding a Network Device Group Y ou can assign users or groups of users to NDGs.
3-25 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Note Y ou must enable the Ke y Wrap feature in the N AP Authentication Settings page to implement these shared keys in EAP-TLS authentication.
3-26 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Network Device Groups Step 2 In the Network De vice Groups table, click the name of the current group of the network device.
3-27 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Deleting a Network Device Group When you delete an NDG, all AAA clients and AAA servers that belong to the deleted group appear in the Not Assigned AAA Clients or Not Assigned AAA Servers table.
3-28 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables About the Proxy Distribution Table If you enabled the Distributed Systems Settings, when you click Netw ork Conf iguration, you will see the Proxy Distribution T able.
3-29 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 5 From the Strip list, select Ye s to strip the character string from the username that you entered, or select No to leav e it.
3-30 User Guide for Cisco Secure Access Control Server OL-9971-01 Chapter 3 Network Configuration Configuring Proxy Distribution Tables Step 3 Select the character string entry to reorder , and then click Up or Down to mov e its position to ref lect the search order that you want.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Cisco Systems OL-9971-01 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Cisco Systems OL-9971-01 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Cisco Systems OL-9971-01 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Cisco Systems OL-9971-01 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Cisco Systems OL-9971-01, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Cisco Systems OL-9971-01.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Cisco Systems OL-9971-01. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Cisco Systems OL-9971-01 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
