Chapter 9 NAC Configuration Scenario

Step 5: Set Up Shared Profile Components

•Tunnel-Medium-Type (attribute 65)—Indicates which protocol to use over the tunnel. In the sample RACs, this is set to type 6, which specifies an 802 protocol. In the NAC/NAP environment, this is the 802.1x protocol.

•Tunnel-Private-Group-ID (attribute 81)—Indicates the group ID for the VLAN tunnel. In the sample RAC, this is set to Quarantine, which denotes a quarantine VLAN to which devices are assigned. In actual practice, you should set this value to a value that is configured on the switch.

For reference, Table 9-1lists all of the possible attributes that ACS can send. An X in the NAC-L2-802.1x, NAC-L2-IP, or NAC-L3-IP column indicates that ACS can send the specified attribute in a RADIUS Accept-Response used with this technology.

Table 9-1

Attributes That Can Be Sent in the RADIUS-Accept Response

 

 

 

 

 

 

 

 

 

Attribute

 

 

NAC-L2 -802.1x

NAC-L2-IP

NAC-L3-IP

Number

Attribute Name

Description

 

 

 

 

 

 

x

 

 

1

User-Name

Copied from EAP Identity Response in

 

 

 

 

 

Access Request

 

 

 

 

 

 

 

x

x

8

Framed-IP-Address

IP address of host

 

 

 

 

 

 

 

x

x

26

Vendor-Specific

ACL name.

 

 

 

 

Cisco (9,1)

ACS automatically sends this to the NAD as

 

 

 

 

CiscoSecure-Defined-

part of the RADIUS packet.

 

 

 

 

ACL

 

 

 

 

 

 

 

x

 

 

26

Vendor-Specific

Policy-based ACL assignment. Only applies to

 

 

 

 

Cisco (9,1)

Catalyst 6000.

 

 

 

 

sec:pg = <group-name>

 

 

 

 

sec:pg

 

 

 

 

 

 

 

 

 

 

 

 

x

x

26

Vendor-Specific

Redirection URL.

 

 

 

 

Cisco (9,1)

url-redirect = <URL>

 

 

 

 

url-redirect

 

 

 

 

 

 

 

 

x

x

26

Vendor-Specific

Apply the named ACL for the redirect URL;

 

 

 

 

Cisco (9,1)

ACL must be defined locally on the NAD.

 

 

 

 

Only works on switches with IOS.

 

 

 

 

url-redirect-acl

 

 

 

 

url-redirect-acl =< ACL-Name>

 

 

 

 

 

 

 

 

 

 

 

x

x

x

26

Vendor-Specific

Posture token/state name.

 

 

 

 

Cisco (9,1)

Automatically sent by ACS.

 

 

 

 

posture-token

 

 

 

 

 

 

 

 

x

x

26

Vendor-Specific

Sets Status Query timer

 

 

 

 

Cisco (9,1)

 

 

 

 

 

status-query-timeout

 

 

 

 

 

 

 

 

x

x

26

Vendor-Specific

Session identifier used for auditing.

 

 

 

 

Cisco (9,1)

Automatically sent by ACS.

 

 

 

 

host-session-id

 

 

 

 

 

 

 

 

Configuration Guide for Cisco Secure ACS 4.2

9-30

OL-14390-02

Page 151 Page 153
Page 152
Image 152
Cisco Systems 4.2 manual Number Attribute Name Description, Acl
Page 151 Page 153

4.2 specifications

Cisco Systems, a global leader in IT and networking solutions, has consistently evolved to meet the demands of modern enterprises. One of its noteworthy offerings is Cisco Systems 4.2, a version that embodies a significant leap in networking technology and capability. With its rich set of features, Cisco Systems 4.2 caters to a wide range of industries, facilitating enhanced performance and security.

One of the main features of Cisco Systems 4.2 is its improved scalability. The architecture has been designed to support an ever-increasing number of devices and users, making it ideal for growing enterprises. The enhanced scalability allows organizations to expand their network capacities without compromising performance, ensuring seamless integration of new technologies and devices.

Another critical aspect of Cisco Systems 4.2 is its advanced security protocols. With cyber threats constantly evolving, Cisco prioritizes security in this version by offering robust features such as end-to-end encryption, improved firewall capabilities, and enhanced intrusion detection systems. These security enhancements provide organizations with peace of mind, knowing that their sensitive data and networks are well-protected from unauthorized access and potential threats.

Cisco Systems 4.2 also introduces intelligent automation features, which significantly streamline network management. Through the use of artificial intelligence and machine learning, Cisco enables organizations to automate routine tasks, reduce human error, and optimize performance. This automation not only enhances efficiency but also allows IT teams to focus on strategic initiatives rather than day-to-day maintenance.

Moreover, Cisco Systems 4.2 emphasizes infrastructure flexibility. The new architecture supports various deployment models, including on-premises, cloud, and hybrid environments. This flexibility enables organizations to adapt their networking strategies according to their specific needs and operational requirements, facilitating a more tailored approach to IT infrastructure.

Collaboration tools have also been enhanced in this version. Cisco Systems 4.2 integrates advanced communication solutions that empower teams to collaborate in real time, regardless of their geographical location. Features such as high-definition video conferencing, secure messaging, and file sharing enhance productivity and foster innovation across teams.

In summary, Cisco Systems 4.2 stands out as a forward-thinking networking solution with key features such as scalability, advanced security, intelligent automation, flexible infrastructure, and enhanced collaboration tools. These characteristics position Cisco Systems 4.2 as an invaluable asset for enterprises striving for digital transformation in an increasingly interconnected world. The ongoing innovation reflects Cisco's commitment to delivering cutting-edge technology solutions that drive business success and resilience.
Top Page Image Contents