Cisco Acs 57 User Guide

1   
Managing Reports
Available Filters
Table 3 Available Filters
Option Description
User Enter a valid username on which to configure your threshold.
MAC Address Enter a valid MAC address on which to run your report.
Identity Group Enter a valid identity group name on which to run your report.
Device Name Enter a valid device name on which to run your report.
Device IP Enter a valid device IP address on which to run your report.
SNMP Community Configure SNMP preferences to authenticate access to MIB...

2
Managing Reports
 
Available Filters
Top Use the drop down list box to select the number of top (most frequent) authentications by access 
service on which you want to run your report. Valid options are:
10
50
100
500
1000
5000
By Use the drop down list box to select the type of authentications on which you want to run your report. 
Valid options are:
Passed Authentications
Failed Authentications
Total Authentications
Administrator Name Enter the administrator username for which you want to...

2   
Managing Reports
Changing Authorization for RADIUS Active Sessions Dynamically
Related Topics
ACS Reports, page 2
Favorite Reports, page 13
Available Reports, page 14
Running Reports, page 3
Changing Authorization for RADIUS Active Sessions Dynamically
ACS provides the Dynamic Change of Authorization (CoA) feature through a new report, the RADIUS Active Sessions report, 
which allows you to dynamically control active RADIUS sessions. With this feature, you can send a reauthenticate or disconnect...

2
Managing Reports
 
Changing Authorization for RADIUS Active Sessions Dynamically
Enabling RADIUS CoA Options on a Device
To view all the RADIUS Active Session reports you have to enable RADIUS CoA options on the device.
To configure the RADIUS CoA options:
1.Configure MAB, 802.1X and Web Authentication on the NAD against ACS RADIUS Server.
2.Configure CoA on the NAD as follows, which is connected to the supplicant. 
aa server radius dynamic-author
client { - } [vrf ] [server-key]
server-key [0 - 7]...

2   
Managing Reports
Understanding Charts
3.Select a CoA option from the CoA option drop-down list box shown in Figure 8 on page 23.
Valid options are:
Disconnect:None—Do not terminate the session.
Disconnect:Port Bounce—Terminate the session and restart the port.
Disconnect:Port Disable—Terminate the session and shut down the port.
Re-Auth—Reauthenticate the user.
Figure 8 CoA Options
4.Click Run to reauthenticate or disconnect the RADIUS session.
If your change of authorization fails, it might be...

2
Managing Reports
 
Understanding Charts
Figure 9 Parts of a Basic Bar Chart
There are a variety of chart types. Some types of data are best depicted with a specific type of chart. Charts can be used as 
reports in themselves and they can be used together with tabular data report styles.  

1
Cisco Systems, Inc.www.cisco.com
 
Troubleshooting ACS with the Monitoring 
and Report Viewer
This chapter describes the diagnostic and troubleshooting tools that the Monitoring and Report Viewer provides for the 
Cisco Secure Access Control System.
This chapter contains the following sections:
Available Diagnostic and Troubleshooting Tools, page 1
Performing Connectivity Tests, page 3
Downloading ACS Support Bundles for Diagnostic Information, page 4
Working with Expert Troubleshooter, page 5...

2
Troubleshooting ACS with the Monitoring and Report Viewer
 
Available Diagnostic and Troubleshooting Tools
If the ACS server is not the log collector, the monitoring and reporting configuration is not included in the support 
bundle. See Downloading ACS Support Bundles for Diagnostic Information, page 4 for detailed instructions on how 
to download ACS support bundles.
Expert Troubleshooter
Expert Troubleshooter is an easy-to-use, web-based troubleshooting utility that helps you diagnose and...

3   
Troubleshooting ACS with the Monitoring and Report Viewer
Performing Connectivity Tests
Performing Connectivity Tests
You can test your connectivity to a network device with the dev i c e ’s  h os t n am e o r  I P a d d re ss.  Fo r  e x am p l e ,  you  c an  ver i f y  
your connection to an identity store by performing a connectivity test. In ACS 5.7, you can also test the connectivity of 
remote machines. 
To test connectivity between your ACS and a device’s hostname or IP address:
1.Select...

4
Troubleshooting ACS with the Monitoring and Report Viewer
 
Downloading ACS Support Bundles for Diagnostic Information
Connectivity Tests, page 1
ACS Support Bundle, page 1
Expert Troubleshooter, page 2
Downloading ACS Support Bundles for Diagnostic Information
To create and download an ACS support bundle:
1.Select Monitoring and Reports > Troubleshooting > ACS Support Bundle.
The ACS Support Bundle page appears with the fields described in Table 3 on page 4:
2.Choose a server and click Get Support...