Filter
Top Products
Contents
vii
Configuration Guide for Cisco Secure ACS 4.2
OL-14390-02
Install the CA Certificate 9-7
Install the ACS Certificate 9-8
Set Up Global Configuration 9-8
Set Up Global Authentication 9-9
Set Up EAP-FAST Configuration 9-12
Configure the Logging Level 9-14
Configure Logs and Reports 9-14
Step 4: Set Up Administration Control 9-17
Add Remote Administrator Access 9-17
Step 5: Set Up Shared Profile Components 9-20
Configure Network Access Filtering (Optional) 9-20
Configure Downloadable IP ACLs 9-21
Adding an ACL 9-22
Adding an ACE 9-23
Saving the dACL 9-25
Configure Radius Authorization Components 9-25
Step 6: Configure an External Posture Validation Audit Server 9-31
Add the Posture Attribute to the ACS Dictionary 9-31
Configure the External Posture Validation Audit Server 9-32
Step 7: Configure Posture Validation for NAC 9-35
Configure Internal Posture Validation Policies 9-35
Configure External Posture Validation Policies 9-38
Configure an External Posture Validation Audit Server 9-40
Add the Posture Attribute to the ACS Dictionary 9-40
Configure the External Posture Validation Audit Server 9-41
Authorization Policy and NAC Audit 9-43
Step 8: Set Up Templates to Create NAPs 9-44
Sample NAC Profile Templates 9-44
Sample NAC Layer 3 Profile Template 9-44
Profile Setup 9-45
Protocols Policy for the NAC Layer 3 Template 9-47
Authentication Policy 9-48
Sample Posture Validation Rule 9-49
Sample NAC Layer 2 Template 9-49
Profile Setup 9-50
Protocols Settings 9-53
Authentication Policy 9-54
Sample Posture Validation Rule 9-55
Sample NAC Layer 2 802.1x Template 9-55