[ Pobierz całość w formacie PDF ]
Activity Verification
You have completed this task when you attain this result:
The employee and the consultant roles appear in the Mapping Rules form for the Cisco
VPN server.
Task 5: Enable VPN SSO
In this task, you will enable VPN SSO on the Cisco NAS using the Cisco NAM web
administration console.
Activity Procedure
Complete these steps:
Step 1 Go to Device Management > CCA Servers.
Step 2 Click the Manage button for the Cisco NAS server.
Step 3 Select Authentication > VPN Auth > General on the subtab menu.
Step 4 Check the Single Sign-On check box. This sets the Cisco NAS to process the user
login via RADIUS accounting packets.
Step 5 Check the Auto Logout check box. This configures the Cisco NAM to remove the
user from the Cisco NAM Online Users List when the RADIUS stop record is
received (the record is sent when the user disconnects from the VPN).
Step 6 Leave the default port of 1813 for the RADIUS Accounting Port.
Step 7 Click the Update button to store the VPN SSO changes in the Cisco NAM database.
Note For the Cisco ASA and the Cisco NAC Appliance Release 4.0.0, the supported UDP port
used for RADIUS accounting is 1813.
Activity Verification
You have completed this task when you attain this result:
The acceptance of the last task is the activity verification.
24 Implementing Cisco NAC Appliance (CANAC) v2.1 � 2007 Cisco Systems, Inc.
The PDF files and any printed representation for this material are the property of Cisco Systems, Inc.,
for the sole use by Cisco employees for personal study. The files or printed representations may not be
used in commercial training, and may not be distributed for purposes other than individual self-study.
Task 6: Add the Cisco ASA 5520 to the Cisco NAS
In this task, you will add the Cisco ASA 5520 to the Cisco NAS using the Cisco NAM web
administration console.
Activity Procedure
Complete these steps:
Step 1 Go to Device Management > CCA Servers.
Step 2 Click the VPN Concentrators subtab menu option.
Step 3 Enter Cisco ASA VPN SSO as the name for the VPN concentrator in the Name
field.
Step 4 Enter 10.10.10.3 in the IP Address field. This is the private IP address of the Cisco
ASA.
Step 5 Enter cisco123 in the Shared Secret field for the VPN concentrator.
Step 6 Reenter cisco123 in the Confirm Shared Secret field.
Step 7 Enter Cisco ASA VPN SSO in the Description field.
Step 8 Click Add VPN Concentrator.
Activity Verification
You have completed this task when you attain this result:
The Cisco ASA 5520 appears at the bottom of the VPN Concentrators form.
Task 7: Add an Accounting Server to the Cisco NAS
In this optional task, you will add an accounting server to the Cisco NAS using the Cisco NAM
web administration console.
Note Tasks 7 and 8 are optional. Complete these tasks if your lab has a Cisco ACS accounting
server configured on the manager machine.
Activity Procedure
Complete these steps:
Step 1 Click the Accounting Services subtab menu link.
Step 2 Enter ACS Accounting in the Name field.
Step 3 Enter 172.16.1.14 in the IP Address field.
Step 4 Enter 1813 in the Port field.
Note For the Cisco ASA and the Cisco NAC Appliance Release 4.0.0, the supported UDP port
used for RADIUS accounting is 1813.
Step 5 Enter 2 in the Retry field.
Step 6 Enter 3 in the Timeout field.
Step 7 Enter cisco123 in the Shared Secret field. Enter cisco123 in the Confirm Shared
Secret field.
Step 8 Enter Cisco ACS on manager machine in the Description field.
� 2007 Cisco Systems, Inc. Lab Guide 25
The PDF files and any printed representation for this material are the property of Cisco Systems, Inc.,
for the sole use by Cisco employees for personal study. The files or printed representations may not be
used in commercial training, and may not be distributed for purposes other than individual self-study.
Step 9 Click the Add Accounting Server button.
Activity Verification
You have completed this task when you attain this result:
The Cisco VPN accounting server appears at the bottom of the Accounting Services form.
Task 8: Map the Cisco ASA 5520 to the Accounting Server
In this optional task, you will map the Cisco ASA 5520 to the Cisco ACS accounting server
using the Cisco NAM web administration console.
Activity Procedure
Complete these steps:
Step 1 Click the Accounting Mapping subtab menu link.
Step 2 Confirm the settings in the Accounting Mapping form.
[ Pobierz całość w formacie PDF ]
