Filter
Top Products
8-68
User Guide for Cisco Secure Access Control System 5.4
OL-26225-01
Chapter8 Managing Users and Identity Stores
Managing External Identity Stores
Related Topics
• RADIUS Identity Stores, page 8-63
• Creating, Duplicating, and Editing RADIUS Identity Servers, page 8-66
• Configuring Shell Prompts, page 8-69
• Configuring Directory Attributes, page 8-69
• Configuring Advanced Options, page 8-70
Primary Server
Server IP Address IP address of the primary RADIUS identity server.
Shared Secret Shared secret between ACS and the primary RADIUS identity server.
A shared secret is an expected string of text, which a user must provide
before the network device authenticates a username and password. The
connection is rejected until the user supplies the shared secret.
Authentication Port Port number on which the RADIUS primary server listens. Valid options
are from 1 to 65,535. The default value is 1812.
Server Timeout n Seconds Number of seconds, n, that ACS waits for a response from the primary
RADIUS identity server before it determines that the connection to the
primary server has failed. Valid options are from 1 to 300. The default
value is 5.
Connection Attempts Specifies the number of times that ACS should attempt to reconnect before
contacting the secondary RADIUS identity server or dropping the
connection if no secondary server is configured. Valid options are from 1
to 10. The default value is 3.
Secondary Server
Server IP Address IP address of the secondary RADIUS identity server.
Shared Secret Shared secret between ACS and the secondary RADIUS identity server.
The shared secret must be identical to the shared secret that is configured
on the RADIUS identity server.
A shared secret is an expected string of text, which a user must provide
before the network device authenticates a username and password. The
connection is rejected until the user supplies the shared secret.
Authentication Port Port number on which the RADIUS secondary server listens. Valid options
are from 1 to 65,535. The default value is 1812.
Server Timeout n Seconds Number of seconds, n, that ACS waits for a response from the secondary
RADIUS identity server before it determines that the connection to the
secondary server has failed.
Valid options are from 1 to 300. The default value is 5.
Connection Attempts Specifies the number of times that ACS should attempt to reconnect before
dropping the request. Valid options are from 1 to 10. The default value is 3.
Table 8-19 RADIUS Identity Server - General Tab (continued)
Option Description