Cisco Acs 5x User Guide

							13-17
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 13      Managing Reports
  Working with Catalog Reports
Related Topics
Working with Catalog Reports, page 13-7
Working with Favorite Reports, page 13-3
Available Reports in the Catalog, page 13-7
Running Catalog Reports, page 13-11 Administrator Name Enter the administrator username, or click Select to select the administrator username, for which you 
want to run your report.
Object Type Enter a valid object type on which you want to run your report.
Object Name Enter the name, or click Select to select the object name, of the object on which you want to run your 
report.
Authorization Status Use the drop down list box to select which authentication status on which you want to run your report. 
Valid options are:
Pass Or Fail
Pass
Fail
Time  Range Use the drop down list box to select the time range on which you want to run your report. Valid options 
are:
Last Hour (for the ACS Health Summary report only)
To d a y
Ye s t e r d a y
Last 7 Days
Last 30 Days
Custom—You must configure a Start Date and End Date, or a Day.
NoteSome options are not valid for some Time Range entries of the various reports.
Start Date Enter a date, or click the date selector icon to enter the start date for which you want run your report.
End Date Enter a date, or click the date selector icon to enter the end date for which you want run your report.
Day Enter a date, or click the date selector icon to enter the end date for which you want run your report.
Clear Click to delete the contents of an associate text box.
Run Click to run the report for which you have made selections.
Table 13-5  Page (continued)
Option Description 
						

							13-18
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 13      Managing Reports
  Working with Catalog Reports
Enabling RADIUS CoA Options on a Device
To view all the RADIUS Active Session reports you have to enable RADIUS CoA options on the device.
To configure the RADIUS CoA options:
Step 1Configure MAB, 802.1X and Web Authentication on the NAD against ACS RADIUS Server.
Step 2Configure CoA on the NAD as follows, which is connected to the supplicant. 
aa server radius dynamic-author
client { - } [vrf ] [server-key]
server-key [0 - 7] 
port 
auth-type {any - all - session-key}
ignore session-key
ignore server-key
Step 3Configure the authentication order (Flex-Auth).
Changing Authorization and Disconnecting Active RADIUS Sessions
NoteSome of the NADs in your deployment do not send an Accounting Stop or Accounting Off packet after 
a reload. As a result of this, you might find two sessions in the Session Directory reports, one of which 
has expired. Hence, when you want to dynamically change the authorization of an active RADIUS 
session or disconnect an active RADIUS session, ensure that you always choose the most recent session. 
To change authorization or disconnect an active RADIUS session:
Step 1Run the RADIUS Active Sessions report under Session Directory. 
See Running Catalog Reports, page 13-11 for information on how to run a RADIUS Active Sessions 
report.
A report similar to the one shown in Figure 13-2 appears. 
						

							13-19
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 13      Managing Reports
  Working with Catalog Reports
Figure 13-2 RADIUS Active Session Report
Step 2
Click the CoA link from the RADIUS session that you want to reauthenticate or terminate.
The Change of Authorization Request page appears.
Step 3Select a CoA option from the CoA option drop-down list box shown in Figure 13-3.
Valid options are:
Disconnect:None—Do not terminate the session.
Disconnect:Port Bounce—Terminate the session and restart the port.
Disconnect:Port Disable—Terminate the session and shut down the port.
Re-Auth—Reauthenticate the user.
Figure 13-3 CoA Options
Step 4
Click Run to reauthenticate or disconnect the RADIUS session.
If your change of authorization fails, it might be because of any of the following reasons:
Device does not support CoA
Changes to the identity or authorization policy 
						

							13-20
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 13      Managing Reports
  Working with Catalog Reports
Shared secret mismatch
Step 5See the Troubleshooting RADIUS Authentications, page 14-6 to troubleshoot a failed change of 
authorization attempt. 
A failed dynamic CoA will be listed under failed RADIUS authentications.
Customizing Reports
To customize a system report:
Step 1Select Monitoring & Reports > Reports > Catalog > report_type > report_name, where report_type 
is the type of report, and report_name is the name of the report that you want to customize.
The Reports page appears.
Step 2Click the radio button next to the name of the report you want to customize, or click the name of the 
report you want to customize.
Step 3Click Run.
The Run Report page appears. 
Step 4Modify fields in the Run Reports page as required.
Step 5Click Run.
The report appears.
Step 6Click Launch Interactive Viewer.
Step 7Modify the report contents as required and click Save As to save the customized report with the same, 
or a different, report name in any Catalog > Reports page.
NoteIf you save the customized report with the same name as the original system report (overwriting 
the original system report), you cannot delete it. To restore a customized report to the default, 
preconfigured system report settings, see Restoring Reports, page 13-20.
The customized report is saved to your specified location.
Restoring Reports
Use the procedure described in this topic, to restore a system report that you have customized back to its 
original preconfigured system report settings.
This procedure resets all reports that reside in a report catalog type. For example, if you want to reset a 
specific customized report that resides in the Monitoring & Reports > Reports > Catalog > Endpoint 
page, this procedure completes that task but also resets all other reports within the Endpoint page.
Step 1Select Monitoring & Reports > Reports > Catalog > report_type, where report_type is the type of 
report in which the customized report that you want to reset to the original system report settings resides.
Step 2Click Reset Reports. 
						

							13-21
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 13      Managing Reports
  Viewing Reports
Step 3Click Ye s to confirm that you want to reset the System Report files to the factory default. 
The page is refreshed, and the reports in Catalog > report_type are reset to the factory default.
Viewing Reports
This section describes how to view the reports and perform various tasks in Standard or Interactive 
Viewer. In Standard Viewer or Interactive Viewer, you can navigate to the report, print the data, and 
export the data to another format. Interactive Viewer also provides the ability to modify the content, 
organization, and formatting of the report.
This section contains the following topics:
About Standard Viewer, page 13-21
About Interactive Viewer, page 13-21
About Interactive Viewer’s Context Menus, page 13-21
Navigating Reports, page 13-23
Exporting Report Data, page 13-24
Printing Reports, page 13-26
Saving Report Designs in Interactive Viewer, page 13-26
About Standard Viewer
From Standard Viewer, you can open a table of contents, navigate the report, export data to spreadsheet 
format, and print the report.
You can click Launch Interactive Viewer to close Standard Viewer and view the report in Interactive 
Viewer. See About Interactive Viewer, page 13-21.
About Interactive Viewer
Interactive Viewer provides all the features of Standard Viewer and also supports modifying many 
aspects of the report’s layout and formatting. The Interactive Viewer toolbar is much more extensive than 
that in Standard Viewer. See About Interactive Viewer’s Context Menus, page 13-21.
About Interactive Viewer’s Context Menus
Interactive Viewer provides context menus that support many of the formatting, sorting, and grouping 
tasks you perform on data. Figure 13-4 shows the context menu for columns. Using this menu, you can 
add or delete a column, sort data, add or delete a group, and work with fonts and text alignment. 
You also can sort and filter data, and create calculations and aggregate rows. To access this context menu, 
select a column, then right-click the column. 
						

							13-22
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 13      Managing Reports
  Viewing Reports
Figure 13-4 Context Menu for Column Data in Interactive Viewer
Figure 13-5 shows the context menu you use to modify labels in Interactive Viewer. To display this 
menu, select and right-click a label. Use this menu to edit the label text or change the text alignment or 
font properties of the label.
Figure 13-5 Context Menu for Labels in Interactive Viewer
If the report contains a chart, you can use the context menu for charts, shown in Figure 13-6, to modify 
the chart’s formatting, subtype, and other properties.
Figure 13-6 Context Menu for Charts in Interactive Viewer
In each context menu, selecting an entry with a right arrow provides access to related context menu 
choices. For example, right-clicking a column and choosing Alignment enables you to choose Left, 
Center, or Right to specify the desired type of alignment. 
						

							13-23
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 13      Managing Reports
  Viewing Reports
Navigating Reports
When you open a report in the viewer, you see the first page of data. To view or work with data, you use 
tools that help you navigate the report.
In the viewer, you can page through a report by using the paging tool shown in Figure 13-7. Using this 
tool, you can click an arrow to view the first or last page in the report, or move forward or back through 
the report page by page.
Figure 13-7 Paging Tool
The viewer also supports going to a specific page by typing a page number in Go to page, as shown in 
Figure 13-8, and clicking the arrow beside the field.
Figure 13-8 Going to a Specific Page
Using the Table of Contents
In the viewer, you can open a table of contents to view the report structure and navigate the report. To 
open the table of contents, choose the table of contents button in the toolbar. Figure 13-9 shows a report 
in Standard Viewer with the table of contents open.
Figure 13-9 Using the Table of Contents to Navigate
Each entry in the table of contents is a link to a page in the report. If an entry has a plus sign (+) beside 
it, you can expand the entry by clicking the plus sign. Figure 13-10 shows an expanded entry.
Table of contents 
						

							13-24
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 13      Managing Reports
  Viewing Reports
Figure 13-10 Table of Contents Expanded Entry
To navigate to a specific page, click the related link.
Exporting Report Data
The viewer supports the ability to export report data to an Excel spreadsheet as a comma-separated 
values (.csv) file, pipe-separated values (.psv) file, or a tab-separated values (.tsv) file. You can select an 
option to export the column’s data type.
The spreadsheet data is formatted like the data in the information object or the template. If you edited 
column headers or formatted numeric data in the report design, for example, the spreadsheet does not 
reflect your edits. Figure 13-11 shows a sample CSV output file.
Figure 13-11 Report Data Exported to Microsoft Excel 
						

							13-25
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 13      Managing Reports
  Viewing Reports
In Excel, you can resize columns and format the data as you would do for any other spreadsheet.
Step 1In the viewer, select Export Data. 
The Export Data dialog box appears, as shown in Figure 13-12.
Figure 13-12 The Export Data Dialog Box
Available Result Sets lists the tables in the report. 
Available Columns lists the columns you can export from the specified table. You can export any of the 
data the report uses, including the data in aggregate rows and calculated columns. If the report uses more 
than one data source, you can export data from each data source separately.
Step 2In Available Columns, select a column to export and choose the single right arrow. 
To select all the columns, choose the double right arrow and click OK. 
The File Download dialog box appears displaying the default name assigned to the file and the.csv file 
extension. You can change the name of the file in Step 4.
Step 3Click Save.
Step 4In the Save As dialog box:
In Save in, navigate to the folder in which you want to save this file.
In File name, change the name of the file.
Step 5Click Save. 
The CSV file appears in the new location.
When you open the file, you see the data as an editable Microsoft Excel worksheet. You might need to 
expand columns to view all the data. 
						

							13-26
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 13      Managing Reports
  Viewing Reports
Printing Reports
You can print a report that appears in the viewer in HTML or PDF format. Because you can modify the 
report in Interactive Viewer, Interactive Viewer supports printing either the original report or the report 
as you modify it.
Step 1In the viewer, select Print Report.
The Print dialog box appears.
Step 2In Format field, select HTML or PDF.
Step 3In the Page Range field, select the pages you want to print. 
Step 4Click OK.
Step 5Depending on your format selection in Step 2, you have the following options:
If you selected HTML format, a print dialog box appears in which you can specify printer options.
If you selected PDF format, the report appears in a PDF viewer plug-in in your web browser. You 
can review the report then choose Print to specify printer options.
Saving Report Designs in Interactive Viewer
You can save a report design from Interactive Viewer when you are working in the design environment 
or in Interactive Viewer.
Step 1Click Save.
The Save dialog box appears. An example is shown inFigure 13-13. 
Figure 13-13 Save Dialog Box