Cisco Systems CSACS3415K9 Manual De Usuario
7-18
User Guide for Cisco Secure Access Control System 5.4
OL-26225-01
Chapter 7 Managing Network Resources
Configuring a Default Network Device
Choose Network Resources > Default Network Device to configure the default network device. The
Default Network Device page appears, displaying the information described in
Default Network Device page appears, displaying the information described in
Table 7-6
Default Network Device Page
Option
Description
Default Network Device
The default device definition can optionally be used in cases where no specific device definition is found that matches a
device IP address.
device IP address.
Default Network Device Status Choose Enabled from the drop-down list box to move the default network device to the
active state.
Network Device Groups
Location
Click Select to display the Network Device Groups selection box. Click the radio button
next to the Location network device group you want to associate with the network device.
next to the Location network device group you want to associate with the network device.
See
for information
about creating network device groups.
Device Type
Click Select to display the Network Device Groups selection box. Click the radio button
next to the Device Type network device group you want to associate with the network
device.
next to the Device Type network device group you want to associate with the network
device.
See
for information
about creating network device groups.
Authentication Options
TACACS+
Check to use the Cisco IOS TACACS+ protocol to authenticate communication to and from
the network device.
the network device.
You must use this option if the network device is a Cisco device-management application,
such as Management Center for Firewalls. You should use this option when the network
device is a Cisco access server, router, or firewall.
such as Management Center for Firewalls. You should use this option when the network
device is a Cisco access server, router, or firewall.
Shared Secret
Shared secret of the network device, if you enabled the TACACS+ protocol.
A shared secret is an expected string of text, which a user must provide before the network
device authenticates a username and password. The connection is rejected until the user
supplies the shared secret.
device authenticates a username and password. The connection is rejected until the user
supplies the shared secret.
Single Connect Device
Check to use a single TCP connection for all TACACS+ communication with the network
device. Choose one:
device. Choose one:
•
Legacy TACACS+ Single Connect Support
•
TACACS+ Draft Compliant Single Connect Support
If you disable this option, ACS uses a new TCP connection for every TACACS+ request.
RADIUS
Check to use the RADIUS protocol to authenticate communication to and from the network
device.
device.
Shared Secret
Shared secret of the network device, if you have enabled the RADIUS protocol.
A shared secret is an expected string of text, which a user must provide before the network
device authenticates a username and password. The connection is rejected until the user
supplies the shared secret.
device authenticates a username and password. The connection is rejected until the user
supplies the shared secret.
CoA Port
Used to set up the RAIUS CoA port for session directory, for user authentication. This
session directory can be launched from Monitoring and Troubleshooting Viewer page. By
default, the CoA port value is filled as 1700.
session directory can be launched from Monitoring and Troubleshooting Viewer page. By
default, the CoA port value is filled as 1700.