Defining NAC Identity Parameters, 189 | Cisco Systems OL-16066-01

Appendix K Router Platform User Interface Reference

Network Admission Control Policy Page

Network Admission Control Page—Identities Tab

			Use the Network Admission Control Identities tab to view, create, edit, and delete
			NAC identity profiles and identity actions. Identity profiles define a specific
			action to perform on traffic received from selected devices, as identified by their
			IP address, MAC address, or device type. In this way, devices with identity
			profiles are handled by NAC without having to undergo posture validation against
			an ACS.
			Navigation Path
			Go to the Network Admission Control Policy Page, page K-183, then click the
			Interfaces tab.
			Related Topics
			• Defining NAC Identity Parameters, page 15-143
			• Network Admission Control Page—Setup Tab, page K-183
			• Network Admission Control Page—Interfaces Tab, page K-186
			Field Reference
Table K-83		Network Admission Control Identities Tab

	Element			Description

	Identity Profiles Table

	Filter			Enables you to filter the information displayed in the table. For more
				information, see Filtering Tables, page 3-24.

	Profile Definition			The type of identity profile—device IP address, MAC address, or device type
				(IP phone).

	Action Name			The name of the action (defined in the Identity Actions table) that is assigned
				to this NAC identity profile.

	Add button			Opens the NAC Identity Profile Dialog Box, page K-190. From here you can
				define an identity profile.

	Edit button			Opens the NAC Identity Profile Dialog Box, page K-190. From here you can
				edit a selected identity profile.

	Delete button			Deletes the selected identity profiles from the table.

				User Guide for Cisco Security Manager 3.2
				User Guide for Cisco Security Manager 3.2
	OL-16066-01					K-189
	OL-16066-01					K-189

Image 189

Cisco Systems OL-16066-01 appendix Network Admission Control Page-Identities Tab, Defining NAC Identity Parameters, 189

Contents

Router Platform User Interface Reference Dhcp Policy Page, page K-167 NTP Policy Page, page K-174 CPU Policy Page, page K-107 NAT Policy NAT Page-Interface Specification TabFor more information, see NAT on Cisco IOS Routers, Chapter K, Router Platform User Interface Reference Related Topics Edit Interfaces Dialog Box-NAT Inside Interfaces Field Reference Edit Interfaces Dialog Box-NAT Outside Interfaces NAT Page-Static Rules Tab Information, see Filtering Tables, NAT Static Rule Dialog Box Defining Static NAT Rules, Basic Interface Settings on Cisco IOS Routers,Disabling the Alias Option for Attached Subnets, Disabling the Payload Option for Overlapping Networks, Table K-5 NAT Static Rule Dialog Box Table K-5 NAT Static Rule Dialog Box Appendix K Router Platform User Interface Reference NAT Page-Interface Specification Tab, page K-3 NAT Page-Dynamic Rules TabFor more information, see Defining Dynamic NAT Rules, NAT Dynamic Rule Dialog Box F-593 Object Selectors, page F-593 NAT Page-Timeouts Tab Specifying NAT Timeouts, Router Interfaces Create Router Interface Dialog Box Table Columns and Column Heading Features, Enabled Type Name Parent BRI, PRI Isdn Discontiguous Network Masks, Table K-10 Create Router Interface Dialog Box MTU Vlan ID Dlci Interface Auto Name Generator Dialog Box Advanced Interface Settings CDP Available Interface Types, Advanced Interface Settings Dialog Box You can create an interface role object Eguide09186a00804247fc.html Selectors, page F-593For more information, see Understanding Helper Addresses, Cisco Discovery Protocol settings Table K-13 Advanced Interface Settings Dialog Box Fragreassmps6441TSDProductsConfigurationGuideChapter.html VFR00800a3ded.shtml ACL AIM-IPS Interface Settings IPS Monitoring Information Dialog Box Dialer Policy Configuring Dial Backup, Dialer Profile Dialog Box SPID1SPID2 Table K-17 Dialer Profile Dialog Box Dialer Physical Interface Dialog Box Isdn BRI Adsl Policy Adsl on Cisco IOS Routers, Defining Adsl Settings, PVC Policy Page, page K-54 Adsl Settings Dialog Box Supported by each card type may cause deployment to fail Table K-20 Adsl Settings Dialog Box Shdsl Policy Edit the selected DSL controller definition Shdsl on Cisco IOS Routers, Shdsl Controller Dialog Box Defining Shdsl Controllers,Dialog Box, page K-53 User Guide for Cisco Security Manager CPE Table K-22 Shdsl Dialog Box Controller Auto Name Generator Dialog Box PVC Policy PVC PVC IDPVC OAM OAM-PVC Defining ATM PVCs, PVC Dialog Box Table K-25 PVC Dialog Box PVC Dialog Box-Settings Tab, page K-59 PVC. See PVC Dialog Box-QoS Tab, page K-63Inverse ARP. See PVC Dialog Box-Protocol Tab, page K-67 PVC Dialog Box-Settings Tab VPI VCIIlmi PVC Resources are freed for other dial-in users PVC Dialog Box-QoS Tab Dialog Box-Protocol Tab, page K-67PPP Understanding Policing and Shaping Parameters, Quality of Service Policy Page, page K-199 Service Classes, ABRCBR UBR+ UBRVBR-NRT VBR-RT PVC Dialog Box-Protocol Tab PVC Dialog Box, page K-56 Defining ATM PVCs, Define Mapping Dialog Box Type for the PVC. See PVC Dialog Box-Settings Tab, page K-59 PVC Advanced Settings Dialog Box Advanced Settings Dialog Box-OAM Tab, page K-70 PVC Advanced Settings Dialog Box-OAM TabAdvanced Settings Dialog Box-OAM-PVC Tab, page K-73 Go to the PVC Dialog Box, page K-56, then click Advanced PVC Dialog Box, page K-56 Table K-31 PVC Advanced Settings Dialog Box-OAM Tab OAM-PVC tab PVC Advanced Settings Dialog Box-OAM-PVC Tab Table K-32 PVC Advanced Settings Dialog Box-OAM-PVC Tab Table K-32 PVC Advanced Settings Dialog Box-OAM-PVC Tab PPP/MLP Policy Table K-33 PPP/MLP Defining PPP Connections, PPP Dialog Box Connection. See PPP Dialog Box-PPP Tab, page K-80 PPP Dialog Box-PPP Tab Tab, page K-84PPP Dialog Box-MLP Tab, page K-84 Table K-35 PPP Dialog Box-PPP Tab It for other PPP connections on this device Chap Authentication settings PPP Dialog Box-MLP Tab PPP Dialog Box-PPP Tab, page K-80MLP Advance None-Negotiation is conducted without using an endpoint AAA Policy Defining AAA Services, AAA Page-Authentication Tab Predefined AAA Authentication Server Groups, Understanding Method Lists,AAA Server Group Dialog Box, page F-12 AAA Page-Authorization Tab Information, see Filtering Tables, Command Authorization Dialog Box AAA Page-Accounting Tab Table K-41 AAA Page-Accounting Tab See description Table N-91 on page N-131 Command Accounting Dialog Box Server groups configured with TACACS+ Accounts and Credential s Policy Table K-43 Accounts and Credentials 100 User Account Dialog Box Defining Accounts and Credential Policies, Understanding FlexConfig Objects,User Accounts and Device Credentials on Cisco IOS Routers, MD5 Bridging Policy Bridging on Cisco IOS Routers,102 103 Bridge Group Dialog Box 104 Clock Policy 105 106 107 CPU Policy 108 109 110 Http Policy Http Page-Setup Tab Http and Https on Cisco IOS Routers,111 Http Page-AAA Tab Https112 113 Http Page-Setup Tab, page K-111 114 115 Http Policy Page, page K-110 Command Authorization Override Dialog BoxAAA Policy Page, page K-87 116 117 Console Policy Console Page-Setup Tab VTY Line Dialog Box-Setup Tab, page K-132118 119 120 121 Console Page-Authentication Tab 122 Page-Authentication Tab, page K-88 123 Console Page-Authorization Tab 124 125 Console Page-Accounting Tab 126 127 Page-Accounting Tab, page K-93 128 129 VTY Policy 130 Dialog Box-Setup Tab, page K-132 Line Access on Cisco IOS Routers,VTY Line Dialog Box 131 Defining VTY Line Setup Parameters, VTY Line Dialog Box-Setup TabConsole Page-Setup Tab, page K-118 132 133 134 Policy. See Http Page-Setup Tab, page K-111 135 136 VTY Line Dialog Box-Authentication Tab 137 VTY Line Dialog Box-Authorization Tab 138 Page-Authorization Tab, page K-90 139 VTY Line Dialog Box-Accounting Tab 140 141 142 Command Authorization Dialog Box-Line Access Console Policy Page, page K-117 VTY Policy Page, page K-129143 144 Level. See Command Accounting Dialog Box, page K-96 145 Command Accounting Dialog Box-Line Access 146 147 Secure Shell Policy 148 Box-Setup Tab, page K-132 Snmp Policy For more information, see Defining Snmp Agent Properties,149 150 Snmp on Cisco IOS Routers, Permission Dialog Box Generate. See Snmp Traps Dialog Box, page K-155151 Snmp Traps Dialog Box, page K-155 Trap Receiver Dialog Box, page K-153Defining Snmp Agent Properties, 152 Trap Receiver Dialog Box Permission Dialog Box, page K-151153 154 155 Snmp Traps Dialog Box 156 For more information, see Understanding IKE, 157 158 DNS Policy IP Host Dialog Box DNS on Cisco IOS Routers,159 Hostname Policy Hostnames and Domain Names on Cisco IOS Routers,160 For more information, see Defining Router Memory Settings, Memory Policy161 162 Secure Device Provisioning Policy Secure Device Provisioning on Cisco IOS Routers,163 Secure Device Provisioning Workflow, Administrative Introducers,Understanding PKI Enrollment Objects, Click Select to display an Object Selectors, page F-593 165 166 For more information, see Defining Dhcp Policies, Dhcp PolicyDhcp on Cisco IOS Routers, 167 To display an Object Selectors, page F-593 Definition, page 9-153and Supported IP Address Formats,168 169 Defining Dhcp Policies, Dhcp Database Dialog BoxIP Pool Dialog Box, page K-171 170 171 IP Pool Dialog Box 172 Select to display an Object Selectors, page F-593 173 Ddhhmm NTP Policy For more information, see Defining NTP Servers,174 175 NTP Server Dialog Box, page K-176 176 NTP Server Dialog Box 177 Policy Page, page K-174 178 K-174 802.1x Policy For more information, see Defining 802.1x Policies,179 Or click Add to display an Object Selectors, page F-593 Defined here. See PPP Dialog Box, page K-78180 181 182 Network Admission Control Page-Setup Tab Network Admission Control Policy183 184 Defining NAC Setup Parameters, Configuration Dialog Box, page K-187 More information, see Working with Access Rules,185 Network Admission Control Page-Interfaces Tab Network Admission Control Page-Setup Tab, page K-183Defining NAC Interface Parameters, 186 187 NAC Interface Configuration Dialog Box 188 Page, page F-31 Network Admission Control Page-Identities Tab Defining NAC Identity Parameters,189 190 NAC Identity Profile Dialog Box NAC Identity Action Dialog Box, page K-191 NAC Identity Action Dialog BoxActions, see NAC Identity Action Dialog Box, page K-191 NAC Identity Profile Dialog Box, page K-190 Intercept ACL. See NAC Interface Configuration Dialog Box Logging Setup PolicyBox, page K-190 K-187 193 194 Information, see -5 on 195 196 Syslog Servers Policy For more information, see Defining Syslog Servers,197 Syslog Server Dialog Box XML198 Defining Syslog Servers, Quality of Service PolicyLogging on Cisco IOS Routers, Understanding Network/Host Objects, Understanding Control Plane Policing, Defining QoS Policies,CIR 200 201 202 QoS Policy Dialog Box Quality of Service on Cisco IOS Routers,K-205 203 204 205 QoS Class Dialog Box 206 Box-Queuing and Congestion Avoidance Tab, page K-212 Box-Matching Tab, page K-208Dialog Box-Policing Tab, page K-214 Tab, page K-217 208 QoS Class Dialog Box-Matching Tab F-593. For more information, see Edit ACLs Dialog Box-QoS DscpClasses, page K-210 209 Edit ACLs Dialog Box-QoS Classes Defining QoS Class Matching Parameters,210 211 QoS Class Dialog Box-Marking Tab 212 QoS Class Dialog Box-Queuing and Congestion Avoidance Tab 213 214 QoS Class Dialog Box-Policing Tab 215 216 217 QoS Class Dialog Box-Shaping Tab 218 219 BGP Routing Policy Defining BGP Routes, BGP Page-Setup TabSupported IP Address Formats, 220 221 Dialog Box, page K-222 222 Neighbors Dialog Box BGP Page-Redistribution Tab BGP Page-Setup Tab, page K-220Redistributing Routes into BGP, 223 224 BGP Redistribution Mapping Dialog Box 225 Eigrp Page-Setup Tab Eigrp Routing Policy226 227 Eigrp Setup Dialog Box 228 Defining Eigrp Routes, Eigrp Page-Interfaces Tab Eigrp Page-Setup Tab, page K-226Edit Interfaces Dialog Box-EIGRP Passive Interfaces 229 230 Defining Eigrp Interface Properties, Systems, see Eigrp Setup Dialog Box, page K-227 Eigrp Interface Dialog Box231 232 Eigrp Page-Redistribution Tab 233 Redistributing Routes into EIGRP, Eigrp Redistribution Mapping Dialog BoxPage-Redistribution Tab, page K-223 234 235 236 Ospf Interface Policy 237 Ospf Interface Dialog Box Defining Ospf Interface Settings,Ospf Routing on Cisco IOS Routers, 238 239 240 241 242 Objects, Ospf Process Page-Setup Tab Ospf Process Policy243 244 Defining Ospf Process Settings, 245 Ospf Setup Dialog Box Ospf Process Page-Setup Tab, page K-243 Edit Interfaces Dialog Box-OSPF Passive Interfaces246 Defining Ospf Area Settings, Ospf Process Page-Area Tab247 248 Ospf Area Dialog Box 249 Ospf Process Page-Redistribution Tab 250 251 Ospf Redistribution Mapping Dialog Box 252 253 Ospf Redistribution Mapping Dialog Box, page K-251 Ospf Max Prefix Mapping Dialog BoxK-243 254 RIP Page-Setup Tab RIP Routing Policy255 Defining RIP Setup Parameters, An Object Selectors, page F-593256 RIP Page-Authentication Tab Edit Interfaces Dialog Box-RIP Passive Interfaces257 Defining RIP Interface Authentication Settings, RIP Page-Setup Tab, page K-255258 259 RIP Authentication Dialog Box Redistribution tab. See RIP Page-Setup Tab, page K-255 RIP Page-Redistribution Tab260 RIP Redistribution Mapping Dialog Box Redistributing Routes into RIP,261 262 Static Routing Policy Static Routing on Cisco IOS Routers,263 264 Static Routing Dialog Box 265 Defining Static Routes, 266 267 268