Cisco Cisco NAC Appliance 4.1.0
8-8
Cisco NAC Appliance - Clean Access Server Installation and Administration Guide
OL-12213-01
Chapter 8 Integrating with Cisco VPN Concentrators
Configure Clean Access for VPN Concentrator Integration
Figure 8-6
Add Accounting Server(s)
2.
Type a Name for the accounting server.
3.
Type the IP Address of the accounting server.
4.
Type the Port of the accounting server (typically 1813)
5.
Type the Retry number for the accounting server. This specifies the number of times to retry a
request attempt if there is no response within the Timeout specified. For example, if the Retry is 2,
and the Timeout is 3 (seconds), it will take 6 seconds for the CAS to send the request to the next
accounting server on the list.
request attempt if there is no response within the Timeout specified. For example, if the Retry is 2,
and the Timeout is 3 (seconds), it will take 6 seconds for the CAS to send the request to the next
accounting server on the list.
6.
Type the Timeout of the accounting server (in seconds). This specifies how long the CAS should
wait before retrying a request to the accounting server when there is no response.
wait before retrying a request to the accounting server when there is no response.
7.
Type a Shared Secret between the CAS and accounting server. You can transfer the settings from
the VPN concentrator or create a new secret; however the same secret must be configured on the
accounting server itself.
the VPN concentrator or create a new secret; however the same secret must be configured on the
accounting server itself.
8.
Retype the secret in the Confirm Shared Secret field.
9.
Enter an optional Description.
10.
Click Add Accounting Server.
Map VPN Concentrator(s) to Accounting Server(s)
If managing multiple VPN concentrators and multiple accounting servers, you can create mappings to
associate the VPN concentrator(s) with sets of Accounting Servers. This allows the CAS to continue to
the next server on the list in case an accounting server becomes unreachable.
associate the VPN concentrator(s) with sets of Accounting Servers. This allows the CAS to continue to
the next server on the list in case an accounting server becomes unreachable.
1.
Go to Device Management > CCA Servers > List of Servers > Manage [CAS_IP] >
Authentication > VPN Auth > Accounting Mapping.
Authentication > VPN Auth > Accounting Mapping.