Cisco Systems 4.1 Authentication Proxy Task

9-33

User Guide for Resource Manager Essentials 4.1

OL-11714-01

Chapter 9 Making and Deploying Configuration Changes Using NetConfig

Using System-defined Tasks

For example, the command, snmp-server community public ro will be displayed as snmp-server

community ***** ro.

For each device category, click on Applicable Devices to view the devices in your selection, to which

this task applies.

Authentication Proxy Task

The Authentication Proxy feature helps users to log into the network or access the Internet using HTTP.

Their specific profiles are automatically retrieved and applied from a CiscoSecure ACS, or other

RADIUS, or TACACS+ authentication server.

The Cisco Secure Integrated Software authentication proxy feature allows network administrators to

apply specific security policies on a user to user basis. You can use the Authentication Proxy

system-define, configuration Task on IOS devices which have been configured for VPN functionality.

The IOS category of devices (including Cable devices) are supported by this task.

For more details, see Table 9-3.

You can enter the details of this task in the Authentication Proxy Configuration dialog box. (To invoke

this dialog box, see Starting a New NetConfig Job.)

For the features of system-defined tasks and a description of the features of a system-defined task dialog

box, see Understanding the System-defined Task User Interface (Dialog Box).

The fields in the Authentication Proxy Configuration dialog box are:

Group Sub-Group Field Description

IOS

Parameters

Authorization

(AAA)

Action Select the required option to enable, disable or make no

change to the authorization configuration.

Method 1 Select either tacacs+ or radius as your first method of

authorization.

Method 2 Select either tacacs+ or radius as your second method of

authorization, based on your selection in the first method

Cache Timeout Minutes

(1-2147483647)

Timeout value. The default timeout value can be in the range

of 1 and 2,147,483,647.

Set to default Select this to set the default cache timeout value of 60

seconds.

Banner Action Select Enable or Disable to set or reset Banner display in the

• If you select Enable, the router name is displayed in the

• If you select Disable, then the router name is not

displayed.

If you do not want to make any changes to the banner, select

No Change.