Cisco Systems OL-9971-01 manual AAA Server Configuration Options

Page 15

Chapter 3 Network Configuration

Configuring AAA Servers

•Deleting AAA Servers, page 3-18

AAAServer Configuration Options

AAAserver configurations enable ACS to interact with the AAA server that the configuration represents. AAA servers that do not have a corresponding configuration in ACS, or whose configuration in ACS is incorrect, do not receive AAA services from ACS, such as proxied authentication requests, database replication communication, remote logging, and RDBMS synchronization. Also, several distributed systems features require that the other ACSs included in the distributed system be represented in the AAA Servers table. For more information about distributed systems features, see About ACS in Distributed Systems, page 3-2.

After installation, the AAA Servers table automatically lists the machine on which ACS is installed. This machine is also defined as the default proxy server in the Proxy Distribution table, and appears by default in the RDBMS table.

Note In ACS SE, the name of the machine in the AAA servers table is listed as self; in the Proxy Distribution and RDBMS tables the appliance hostname is listed.

The Add AAA Server and AAA Server Setup pages include the following options:

•AAA Server Name—The name that you assign to the AAA server configuration. The AAA server hostname that is configured in ACS does not have to match the hostname configured on a network device. We recommend that you adopt a descriptive, consistent naming convention for AAA server names. Maximum length for AAA server names is 32 characters.

Note After you submit the AAA server name, you cannot change it. If you want to use a different name for the AAA server, delete the AAA server configuration and create the AAA server configuration by using the new name.

•AAA Server IP Address—The IP address of the AAA server, in dotted, four-octet format. For example, 10.77.234.3.

•Key—The shared secret of the AAA server. Maximum length for AAA server keys is 32 characters.

For correct operation, the key must be identical on the remote AAA server and ACS. Keys are case sensitive. Because shared secrets are not synchronized, you could easily to make mistakes when entering them on remote AAA servers and ACS. If the shared secret does not match, ACS discards all packets from the remote AAA server.

•Network Device Group—The name of the NDG to which this AAA server should belong. To make the AAA server independent of NDGs, use the Not Assigned selection.

Note This option does not appear if you have not configured ACS to use NDGs. To enable NDGs, choose Interface Configuration > Advanced Options. Then, check the Network Device Groups check box.

User Guide for Cisco Secure Access Control Server

 

OL-9971-01

3-15

 

 

 

Page 14 Page 16
Image 15
Page 14 Page 16
Contents About Network Configuration Network ConfigurationAAA Servers in Distributed Systems About ACS in Distributed SystemsDefault Distributed System Settings Proxy FeatureProxy in Distributed Systems An Example Fallback on Failed ConnectionCharacter String Remote Use of Accounting PacketsOther Features Enabled by System Distribution Network Device SearchesNetwork Device Search Criteria Searching for Network Devices AAA Client Configuration Options Configuring AAA ClientsNetwork Configuration Configuring AAA Clients Network Configuration Configuring AAA Clients Before You Begin Adding AAA ClientsEditing AAA Clients Follow the steps for Adding AAA Clients, Configuring a Default AAA ClientDeleting AAA Clients Configuring AAA ServersAAA Server Configuration Options Adding AAA Servers Editing AAA Servers Deleting AAA Servers Configuring Remote Agents ACS Solution Engine OnlyAbout Remote Agents Remote Agent Configuration OptionsAdding a Remote Agent Editing a Remote Agent Configuration Deleting a Remote Agent Configuration Configuring Network Device Groups Adding a Network Device Group Reassigning AAA Clients or AAA Servers to an NDG Assigning an Unassigned AAA Client or AAA Server to an NDGNDG properties are changed Editing a Network Device GroupDeleting a Network Device Group Configuring Proxy Distribution TablesAdding a New Proxy Distribution Table Entry About the Proxy Distribution TableNetwork Configuration Configuring Proxy Distribution Tables Deleting a Proxy Distribution Table Entry Editing a Proxy Distribution Table Entry
Top Page Image Contents