Cisco Acs 5x User Guide

7-11
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 7      Managing Network Resources
  Network Devices and AAA Clients
The first page of the Create Network Device process appears if you are creating a new network device. 
The Network Device Properties page for the selected device appears if you are duplicating or editing a 
network device.
Step 3Modify the fields as required. For field descriptions, see Configuring Network Device and AAA Clients, 
page 7-11.
Step 4Click...

7-12
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 7      Managing Network Resources
  Network Devices and AAA Clients
IP Range(s) By Mask Choose to enter an IP address range. You can configure up to 40 IP addresses or subnet masks for 
each network device. If you use a subnet mask in this field, all IP addresses within the specified 
subnet mask are permitted to access the network and are associated with the network device 
definition.
When you use subnet masks, the number of...

7-13
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 7      Managing Network Resources
  Network Devices and AAA Clients
Single Connect Device Check to use a single TCP connection for all TACACS+ communication with the network device. 
Choose one:
Legacy TACACS+ Single Connect Support 
TACACS+ Draft Compliant Single Connect Support 
If you disable this option, a new TCP connection is used for every TACACS+ request. 
RADIUS Check to use the RADIUS protocol to authenticate...

7-14
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 7      Managing Network Resources
  Network Devices and AAA Clients
Displaying Network Device Properties
Choose Network Resources > Network Devices and AAA Clients, then click a device name or check 
the check box next to a device name, and click Edit or Duplicate.
The Network Devices and AAA Clients Properties page appears, displaying the information described 
in Ta b l e 7 - 5: Download peer 
authorization policy 
every:...

7-15
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 7      Managing Network Resources
  Network Devices and AAA Clients
IP Range(s) By 
MaskChoose to enter an IP address range. You can configure up to 40 IP addresses or subnet masks for each 
network device. If you use a subnet mask in this field, all IP addresses within the specified subnet mask 
are permitted to access the network and are associated with the network device definition.
When you use subnet masks, the number of...

7-16
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 7      Managing Network Resources
  Network Devices and AAA Clients
RADIUS Shared 
SecretShared secret of the network device, if you have enabled the RADIUS protocol.
A shared secret is an expected string of text, which a user must provide before the network device 
authenticates a username and password. The connection is rejected until the user supplies the shared 
secret.
CoA Port Used to set up the RAIUS CoA port for...

7-17
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 7      Managing Network Resources
  Configuring a Default Network Device
Related Topics:
Viewing and Performing Bulk Operations for Network Devices, page 7-6
Creating, Duplicating, and Editing Network Device Groups, page 7-2
Deleting Network Devices
To delete a network device:
Step 1Choose Network Resources > Network Devices and AAA Clients.
The Network Devices page appears, with a list of your configured network devices.
Step...

7-18
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 7      Managing Network Resources
  Configuring a Default Network Device
Choose Network Resources > Default Network Device to configure the default network device. The 
Default Network Device page appears, displaying the information described in Ta b l e 7 - 6.
Table 7-6 Default Network Device Page
Option Description
Default Network Device
The default device definition can optionally be used in cases where no specific device...

7-19
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 7      Managing Network Resources
  Working with External Proxy Servers
Related Topics
Network Device Groups, page 7-2
Network Devices and AAA Clients, page 7-5
Creating, Duplicating, and Editing Network Device Groups, page 7-2
Working with External Proxy Servers
ACS 5.3 can function both as a RADIUS and TACACS+ server and as a RADIUS and TACACS+ proxy 
server. When it acts as a proxy server, ACS receives authentication and...

7-20
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 7      Managing Network Resources
  Working with External Proxy Servers
Step 2Do one of the following:
Click Create.
Check the check box next to the external proxy server that you want to duplicate, then click 
Duplicate. 
Click the external proxy server name that you want to edit, or check the check box next to the name 
and click Edit.
The External Proxy Servers page appears.
Step 3Edit fields in the External Proxy Servers...