IBM Tivoli and Cisco manual Global authentication setup, Click Submit + Restart, 241

Global authentication setup

The Cisco Secure ACS supports many types of protocols for securely transferring credentials from the host to the Cisco Secure ACS for authentication and authorization.

Note: We highly recommend that you enable all protocols globally. You will have the opportunity to limit the actual protocol options later when you create the Network Access Profiles for NAC. If they are not enabled here, they will not be enabled in the Network Access Profiles.

1.Click System Configuration from the main menu and then select Global Authentication Setup (Figure 7-24).

Figure 7-24 Global Authentication Setup

2.Make sure that each check box is selected, that Enable Fast Reconnect is selected, that PEAP and EAP-TLS time outs are set to 120 minutes.

3.Click Submit + Restart.

Chapter 7. Network enforcement subsystem implementation 241