Document Outline

• Contents
• Preface
  • Audience
  • Organization
  • Conventions
  • Product Documentation
  • Related Documentation
  • Obtaining Documentation
    • Cisco.com
    • Ordering Documentation
  • Documentation Feedback
  • Obtaining Technical Assistance
    • Cisco Technical Support Website
    • Submitting a Service Request
    • Definitions of Service Request Severity
  • Obtaining Additional Publications and Information
• Overview
  • The CiscoSecure ACS Paradigm
  • CiscoSecure ACS Specifications
    • System Performance Specifications
    • CiscoSecure ACS Windows Services
  • AAA Server Functions and Concepts
    • CiscoSecure ACS and the AAA Client
    • AAA Protocols—TACACS+ and RADIUS
      • TACACS+
      • RADIUS
    • Authentication
      • Authentication Considerations
      • Authentication and User Databases
      • Authentication Protocol-Database Compatibility
      • Passwords
        • Comparing PAP, CHAP, and ARAP
        • MS-CHAP
        • EAP Support
        • Basic Password Configurations
        • Advanced Password Configurations
        • Password Aging
        • User-Changeable Passwords
      • Other Authentication-Related Features
    • Authorization
      • Max Sessions
      • Dynamic Usage Quotas
      • Shared Profile Components
      • Support for Cisco Device-Management Applications
      • Other Authorization-Related Features
    • Accounting
      • Other Accounting-Related Features
    • Administration
      • HTTP Port Allocation for Administrative Sessions
      • Network Device Groups
      • Other Administration-Related Features
    • Posture Validation
  • CiscoSecure ACS HTML Interface
    • About the CiscoSecure ACS HTML Interface
      • HTML Interface Security
    • HTML Interface Layout
    • Uniform Resource Locator for the HTML Interface
    • Network Environments and Administrative Sessions
      • Administrative Sessions and HTTP Proxy
      • Administrative Sessions through Firewalls
      • Administrative Sessions through a NAT Gateway
    • Accessing the HTML Interface
    • Logging Off the HTML Interface
    • Online Help and Online Documentation
      • Using Online Help
      • Using the Online Documentation
• Deployment Considerations
  • Basic Deployment Requirements for CiscoSecure ACS
    • System Requirements
      • Hardware Requirements
      • Operating System Requirements
      • Third-Party Software Requirements
    • Network and Port Requirements
  • Basic Deployment Factors for CiscoSecure ACS
    • Network Topology
      • Dial-Up Topology
      • Wireless Network
      • Remote Access using VPN
    • Remote Access Policy
    • Security Policy
    • Administrative Access Policy
      • Separation of Administrative and General Users
    • Database
      • Number of Users
      • Type of Database
    • Network Latency and Reliability
  • Suggested Deployment Sequence
• Interface Configuration
  • Interface Design Concepts
    • User-to-Group Relationship
    • Per-User or Per-Group Features
  • User Data Configuration Options
    • Defining New User Data Fields
  • Advanced Options
    • Setting Advanced Options for the CiscoSecure ACS User Interface
  • Protocol Configuration Options for TACACS+
    • Setting Options for TACACS+
  • Protocol Configuration Options for RADIUS
    • Setting Protocol Configuration Options for IETF RADIUS Attributes
    • Setting Protocol Configuration Options for Non-IETF RADIUS Attributes
• Network Configuration
  • About Network Configuration
  • About Distributed Systems
    • AAA Servers in Distributed Systems
    • Default Distributed System Settings
  • Proxy in Distributed Systems
    • Fallback on Failed Connection
      • Character String
      • Stripping
    • Proxy in an Enterprise
    • Remote Use of Accounting Packets
    • Other Features Enabled by System Distribution
  • Network Device Searches
    • Network Device Search Criteria
    • Searching for Network Devices
  • AAA Client Configuration
    • AAA Client Configuration Options
    • Adding a AAA Client
    • Editing a AAA Client
    • Deleting a AAA Client
  • AAA Server Configuration
    • AAA Server Configuration Options
    • Adding a AAA Server
    • Editing a AAA Server
    • Deleting a AAA Server
  • Network Device Group Configuration
    • Adding a Network Device Group
    • Assigning an Unassigned AAA Client or AAA Server to an NDG
    • Reassigning a AAA Client or AAA Server to an NDG
    • Renaming a Network Device Group
    • Deleting a Network Device Group
  • Proxy Distribution Table Configuration
    • About the Proxy Distribution Table
    • Adding a New Proxy Distribution Table Entry
    • Sorting the Character String Match Order of Distribution Entries
    • Editing a Proxy Distribution Table Entry
    • Deleting a Proxy Distribution Table Entry
• Shared Profile Components
  • About Shared Profile Components
  • Network Access Filters
    • About Network Access Filters
    • Adding a Network Access Filter
    • Editing a Network Access Filter
    • Deleting a Network Access Filter
  • Downloadable IP ACLs
    • About Downloadable IP ACLs
    • Adding a Downloadable IP ACL
    • Editing a Downloadable IP ACL
    • Deleting a Downloadable IP ACL
  • Network Access Restrictions
    • About Network Access Restrictions
      • About IP-based NAR Filters
      • About Non-IP-based NAR Filters
    • Adding a Shared Network Access Restriction
    • Editing a Shared Network Access Restriction
    • Deleting a Shared Network Access Restriction
  • Command Authorization Sets
    • About Command Authorization Sets
      • Command Authorization Sets Description
      • Command Authorization Sets Assignment
      • Case Sensitivity and Command Authorization
      • Arguments and Command Authorization
      • About Pattern Matching
    • Adding a Command Authorization Set
    • Editing a Command Authorization Set
    • Deleting a Command Authorization Set
• User Group Management
  • About User Group Setup Features and Functions
    • Default Group
    • Group TACACS+ Settings
  • Basic User Group Settings
    • Group Disablement
    • Enabling VoIP Support for a User Group
    • Setting Default Time-of-Day Access for a User Group
    • Setting Callback Options for a User Group
    • Setting Network Access Restrictions for a User Group
    • Setting Max Sessions for a User Group
    • Setting Usage Quotas for a User Group
  • Configuration-specific User Group Settings
    • Setting Token Card Settings for a User Group
    • Setting Enable Privilege Options for a User Group
    • Enabling Password Aging for the CiscoSecure User Database
    • Enabling Password Aging for Users in Windows Databases
    • Setting IP Address Assignment Method for a User Group
    • Assigning a Downloadable IP ACL to a Group
    • Configuring TACACS+ Settings for a User Group
    • Configuring a Shell Command Authorization Set for a User Group
    • Configuring a PIX Command Authorization Set for a User Group
    • Configuring Device-Management Command Authorization for a User Group
    • Configuring IETF RADIUS Settings for a User Group
    • Configuring Cisco IOS/PIX RADIUS Settings for a User Group
    • Configuring Cisco Aironet RADIUS Settings for a User Group
    • Configuring Ascend RADIUS Settings for a User Group
    • Configuring Cisco VPN 3000 Concentrator RADIUS Settings for a User Group
    • Configuring Cisco VPN 5000 Concentrator RADIUS Settings for a User Group
    • Configuring Microsoft RADIUS Settings for a User Group
    • Configuring Nortel RADIUS Settings for a User Group
    • Configuring Juniper RADIUS Settings for a User Group
    • Configuring BBSM RADIUS Settings for a User Group
    • Configuring Custom RADIUS VSA Settings for a User Group
  • Group Setting Management
    • Listing Users in a User Group
    • Resetting Usage Quota Counters for a User Group
    • Renaming a User Group
    • Saving Changes to User Group Settings
• User Management
  • About User Setup Features and Functions
  • About User Databases
  • Basic User Setup Options
    • Adding a Basic User Account
    • Setting Supplementary User Information
    • Setting a Separate CHAP/MS-CHAP/ARAP Password
    • Assigning a User to a Group
    • Setting User Callback Option
    • Assigning a User to a Client IP Address
    • Setting Network Access Restrictions for a User
    • Setting Max Sessions Options for a User
    • Setting User Usage Quotas Options
    • Setting Options for User Account Disablement
    • Assigning a Downloadable IP ACL to a User
  • Advanced User Authentication Settings
    • TACACS+ Settings (User)
      • Configuring TACACS+ Settings for a User
      • Configuring a Shell Command Authorization Set for a User
      • Configuring a PIX Command Authorization Set for a User
      • Configuring Device-Management Command Authorization for a User
      • Configuring the Unknown Service Setting for a User
    • Advanced TACACS+ Settings (User)
      • Setting Enable Privilege Options for a User
      • Setting TACACS+ Enable Password Options for a User
      • Setting TACACS+ Outbound Password for a User
    • RADIUS Attributes
      • Setting IETF RADIUS Parameters for a User
      • Setting Cisco IOS/PIX RADIUS Parameters for a User
      • Setting Cisco Aironet RADIUS Parameters for a User
      • Setting Ascend RADIUS Parameters for a User
      • Setting Cisco VPN 3000 Concentrator RADIUS Parameters for a User
      • Setting Cisco VPN 5000 Concentrator RADIUS Parameters for a User
      • Setting Microsoft RADIUS Parameters for a User
      • Setting Nortel RADIUS Parameters for a User
      • Setting Juniper RADIUS Parameters for a User
      • Setting BBSM RADIUS Parameters for a User
      • Setting Custom RADIUS Attributes for a User
  • User Management
    • Listing All Users
    • Finding a User
    • Disabling a User Account
    • Deleting a User Account
    • Resetting User Session Quota Counters
    • Resetting a User Account after Login Failure
    • Saving User Settings
• System Configuration: Basic
  • Service Control
    • Determining the Status of CiscoSecure ACS Services
    • Stopping, Starting, or Restarting Services
  • Logging
  • Date Format Control
    • Setting the Date Format
  • Local Password Management
    • Configuring Local Password Management
  • CiscoSecure ACS Backup
    • About CiscoSecure ACS Backup
    • Backup File Locations
    • Directory Management
    • Components Backed Up
    • Reports of CiscoSecure ACS Backups
    • Backup Options
    • Performing a Manual CiscoSecure ACS Backup
    • Scheduling CiscoSecure ACS Backups
    • Disabling Scheduled CiscoSecure ACS Backups
  • CiscoSecure ACS System Restore
    • About CiscoSecure ACS System Restore
    • Backup Filenames and Locations
    • Components Restored
    • Reports of CiscoSecure ACS Restorations
    • Restoring CiscoSecure ACS from a Backup File
  • CiscoSecure ACS Active Service Management
    • System Monitoring
      • System Monitoring Options
      • Setting Up System Monitoring
    • Event Logging
      • Setting Up Event Logging
  • VoIP Accounting Configuration
    • Configuring VoIP Accounting
• System Configuration: Advanced
  • CiscoSecure Database Replication
    • About CiscoSecure Database Replication
      • Replication Process
      • Replication Frequency
    • Important Implementation Considerations
    • Database Replication Versus Database Backup
    • Database Replication Logging
    • Replication Options
      • Replication Components Options
      • Outbound Replication Options
      • Inbound Replication Options
    • Implementing Primary and Secondary Replication Setups on CiscoSecure ACSes
    • Configuring a Secondary CiscoSecure ACS
    • Replicating Immediately
    • Scheduling Replication
    • Disabling CiscoSecure Database Replication
    • Database Replication Event Errors
  • RDBMS Synchronization
    • About RDBMS Synchronization
      • Users
      • User Groups
      • Network Configuration
      • Custom RADIUS Vendors and VSAs
    • RDBMS Synchronization Components
      • About CSDBSync
      • About the accountActions Table
    • CiscoSecure ACS Database Recovery Using the accountActions Table
    • Reports and Event (Error) Handling
    • Preparing to Use RDBMS Synchronization
    • Considerations for Using CSV-Based Synchronization
      • Preparing for CSV-Based Synchronization
    • Configuring a System Data Source Name for RDBMS Synchronization
    • RDBMS Synchronization Options
      • RDBMS Setup Options
      • Synchronization Scheduling Options
      • Synchronization Partners Options
    • Performing RDBMS Synchronization Immediately
    • Scheduling RDBMS Synchronization
    • Disabling Scheduled RDBMS Synchronizations
  • IP Pools Server
    • About IP Pools Server
    • Allowing Overlapping IP Pools or Forcing Unique Pool Address Ranges
    • Refreshing the AAA Server IP Pools Table
    • Adding a New IP Pool
    • Editing an IP Pool Definition
    • Resetting an IP Pool
    • Deleting an IP Pool
  • IP Pools Address Recovery
    • Enabling IP Pool Address Recovery
• System Configuration: Authentication and Certificates
  • About Certification and EAP Protocols
    • Digital Certificates
    • EAP-TLS Authentication
      • About the EAP-TLS Protocol
      • EAP-TLS and CiscoSecure ACS
      • EAP-TLS Limitations
      • Enabling EAP-TLS Authentication
    • PEAP Authentication
      • About the PEAP Protocol
      • PEAP and CiscoSecure ACS
      • PEAP and the Unknown User Policy
      • Enabling PEAP Authentication
    • EAP-FAST Authentication
      • About EAP-FAST
      • About Master Keys
      • About PACs
        • Automatic PAC Provisioning
        • Manual PAC Provisioning
      • Master Key and PAC TTLs
      • Replication and EAP-FAST
      • Enabling EAP-FAST
  • Global Authentication Setup
    • Authentication Configuration Options
    • Configuring Authentication Options
  • CiscoSecure ACS Certificate Setup
    • Installing a CiscoSecure ACS Server Certificate
    • Adding a Certificate Authority Certificate
    • Editing the Certificate Trust List
    • Managing Certificate Revocation Lists
      • About Certificate Revocation Lists
      • Certificate Revocation List Configuration Options
      • Adding a Certificate Revocation List Issuer
      • Editing a Certificate Revocation List Issuer
      • Deleting a Certificate Revocation List Issuer
    • Generating a Certificate Signing Request
    • Using Self-Signed Certificates
      • About Self-Signed Certificates
      • Self-Signed Certificate Configuration Options
      • Generating a Self-Signed Certificate
    • Updating or Replacing a CiscoSecure ACS Certificate
• Logs and Reports
  • Logging Formats
  • Special Logging Attributes
  • NAC Attributes in Logs
  • Update Packets in Accounting Logs
  • About CiscoSecure ACS Logs and Reports
    • Accounting Logs
    • Dynamic Administration Reports
      • Viewing the Logged-in Users Report
      • Deleting Logged-in Users
      • Viewing the Disabled Accounts Report
    • CiscoSecure ACS System Logs
      • Configuring the Administration Audit Log
  • Working with CSV Logs
    • CSV Log File Names
    • CSV Log File Locations
    • Enabling or Disabling a CSV Log
    • Viewing a CSV Report
    • Configuring a CSV Log
  • Working with ODBC Logs
    • Preparing for ODBC Logging
    • Configuring a System Data Source Name for ODBC Logging
    • Configuring an ODBC Log
  • Remote Logging
    • About Remote Logging
    • Implementing Centralized Remote Logging
    • Remote Logging Options
    • Enabling and Configuring Remote Logging
    • Disabling Remote Logging
  • Service Logs
    • Services Logged
    • Configuring Service Logs
• Administrators and Administrative Policy
  • Administrator Accounts
    • About Administrator Accounts
    • Administrator Privileges
    • Adding an Administrator Account
    • Editing an Administrator Account
    • Unlocking a Locked Out Administrator Account
    • Deleting an Administrator Account
  • Access Policy
    • Access Policy Options
    • Setting Up Access Policy
  • Session Policy
    • Session Policy Options
    • Setting Up Session Policy
  • Audit Policy
• User Databases
  • CiscoSecure User Database
    • About the CiscoSecure User Database
    • User Import and Creation
  • About External User Databases
    • Authenticating with External User Databases
    • External User Database Authentication Process
  • Windows User Database
    • What’s Supported with Windows User Databases
    • Authentication with Windows User Databases
    • Trust Relationships
    • Windows Dial-up Networking Clients
      • Windows Dial-up Networking Clients with a Domain Field
      • Windows Dial-up Networking Clients without a Domain Field
    • Usernames and Windows Authentication
      • Username Formats and Windows Authentication
      • Non-domain-qualified Usernames
      • Domain-Qualified Usernames
      • UPN Usernames
    • EAP and Windows Authentication
      • EAP-TLS Domain Stripping
      • Machine Authentication
      • Machine Access Restrictions
      • Microsoft Windows and Machine Authentication
      • Enabling Machine Authentication
    • User-Changeable Passwords with Windows User Databases
    • Preparing Users for Authenticating with Windows
    • Windows User Database Configuration Options
    • Configuring a Windows External User Database
  • Generic LDAP
    • CiscoSecure ACS Authentication Process with a Generic LDAP User Database
    • Multiple LDAP Instances
    • LDAP Organizational Units and Groups
    • Domain Filtering
    • LDAP Failover
      • Successful Previous Authentication with the Primary LDAP Server
      • Unsuccessful Previous Authentication with the Primary LDAP Server
    • LDAP Configuration Options
    • Configuring a Generic LDAP External User Database
  • Novell NDS Database
    • About Novell NDS User Databases
    • User Contexts
    • Novell NDS External User Database Options
    • Configuring a Novell NDS External User Database
  • ODBC Database
    • What is Supported with ODBC User Databases
    • CiscoSecure ACS Authentication Process with an ODBC External User Database
    • Preparing to Authenticate Users with an ODBC-Compliant Relational Database
    • Implementation of Stored Procedures for ODBC Authentication
      • Type Definitions
    • Microsoft SQL Server and Case-Sensitive Passwords
    • Sample Routine for Generating a PAP Authentication SQL Procedure
    • Sample Routine for Generating an SQL CHAP Authentication Procedure
    • Sample Routine for Generating an EAP-TLS Authentication Procedure
    • PAP Authentication Procedure Input
    • PAP Procedure Output
    • CHAP/MS-CHAP/ARAP Authentication Procedure Input
    • CHAP/MS-CHAP/ARAP Procedure Output
    • EAP-TLS Authentication Procedure Input
    • EAP-TLS Procedure Output
    • Result Codes
    • Configuring a System Data Source Name for an ODBC External User Database
    • Configuring an ODBC External User Database
  • LEAP Proxy RADIUS Server Database
    • Configuring a LEAP Proxy RADIUS Server External User Database
  • Token Server User Databases
    • About Token Servers and CiscoSecure ACS
      • Token Servers and ISDN
    • RADIUS-Enabled Token Servers
      • About RADIUS-Enabled Token Servers
      • Token Server RADIUS Authentication Request and Response Contents
      • Configuring a RADIUS Token Server External User Database
    • RSA SecurID Token Servers
      • Configuring an RSA SecurID Token Server External User Database
  • Deleting an External User Database Configuration
• Network Admission Control
  • About Network Admission Control
    • NAC AAA Components
    • Posture Validation
    • Posture Tokens
    • Non-Responsive NAC-Client Computers
  • Implementing Network Admission Control
  • NAC Databases
    • About NAC Databases
    • About NAC Credentials and Attributes
    • NAC Database Configuration Options
    • Policy Selection Options
    • Configuring a NAC Database
  • NAC Policies
    • Local Policies
      • About Local Policies
      • About Rules, Rule Elements, and Attributes
        • NAC Attribute Data Types
        • Rule Operators
      • Local Policy Configuration Options
      • Rule Configuration Options
      • Creating a Local Policy
    • External Policies
      • About External Policies
      • External Policy Configuration Options
      • Creating an External Policy
    • Editing a Policy
    • Deleting a Policy
• Unknown User Policy
  • Known, Unknown, and Discovered Users
  • Authentication and Unknown Users
    • About Unknown User Authentication
    • General Authentication of Unknown Users
    • Windows Authentication of Unknown Users
      • Domain-Qualified Unknown Windows Users
      • Windows Authentication with Domain Qualification
      • Multiple User Account Creation
    • Performance of Unknown User Authentication
      • Added Authentication Latency
      • Authentication Timeout Value on AAA clients
  • Posture Validation and the Unknown User Policy
    • NAC and the Unknown User Policy
    • Posture Validation Use of the Unknown User Policy
    • Required Use for Posture Validation
  • Authorization of Unknown Users
  • Unknown User Policy Options
  • Database Search Order
  • Configuring the Unknown User Policy
  • Disabling Unknown User Authentication
• User Group Mapping and Specification
  • About User Group Mapping and Specification
  • Group Mapping by External User Database
    • Creating a CiscoSecure ACS Group Mapping for a Token Server, ODBC Database, or LEAP Proxy RADIUS...
  • Group Mapping by Group Set Membership
    • Group Mapping Order
    • No Access Group for Group Set Mappings
    • Default Group Mapping for Windows
    • Windows Group Mapping Limitations
    • Creating a CiscoSecure ACS Group Mapping for Windows, Novell NDS, or Generic LDAP Groups
    • Editing a Windows, Novell NDS, or Generic LDAP Group Set Mapping
    • Deleting a Windows, Novell NDS, or Generic LDAP Group Set Mapping
    • Deleting a Windows Domain Group Mapping Configuration
    • Changing Group Set Mapping Order
  • NAC Group Mapping
    • Configuring NAC Group Mapping
  • RADIUS-Based Group Specification
• Troubleshooting
  • Administration Issues
  • Browser Issues
  • Cisco IOS Issues
  • Database Issues
  • Dial-in Connection Issues
  • Debug Issues
  • Proxy Issues
  • Installation and Upgrade Issues
  • MaxSessions Issues
  • Report Issues
  • Third-Party Server Issues
  • User Authentication Issues
  • TACACS+ and RADIUS Attribute Issues
• TACACS+ Attribute-Value Pairs
  • Cisco IOS AV Pair Dictionary
    • TACACS+ AV Pairs
    • TACACS+ Accounting AV Pairs
• RADIUS Attributes
  • CiscoIOS Dictionary of RADIUS AV Pairs
  • CiscoIOS/PIX Dictionary of RADIUS VSAs
  • About the cisco-av-pair RADUIS Attribute
  • CiscoVPN 3000 Concentrator Dictionary of RADIUS VSAs
  • Cisco VPN 5000 Concentrator Dictionary of RADIUS VSAs
  • Cisco Building Broadband Service Manager Dictionary of RADIUS VSA
  • IETF Dictionary of RADIUS AV Pairs
  • Microsoft MPPE Dictionary of RADIUS VSAs
  • Ascend Dictionary of RADIUS AV Pairs
  • Nortel Dictionary of RADIUS VSAs
  • Juniper Dictionary of RADIUS VSAs
• CSUtil Database Utility
  • Location of CSUtil.exe and Related Files
  • CSUtil.exe Syntax
  • CSUtil.exe Options
  • Displaying Command-Line Syntax
  • Backing Up CiscoSecure ACS with CSUtil.exe
  • Restoring CiscoSecure ACS with CSUtil.exe
  • Creating a CiscoSecure User Database
  • Creating a CiscoSecure ACS Database Dump File
  • Loading the CiscoSecure ACS Database from a Dump File
  • Compacting the CiscoSecure User Database
  • User and AAA Client Import Option
    • Importing User and AAA Client Information
    • User and AAA Client Import File Format
      • About User and AAA Client Import File Format
      • ONLINE or OFFLINE Statement
      • ADD Statements
      • UPDATE Statements
      • DELETE Statements
      • ADD_NAS Statements
      • DEL_NAS Statements
      • Import File Example
  • Exporting User List to a Text File
  • Exporting Group Information to a Text File
  • Exporting Registry Information to a Text File
  • Decoding Error Numbers
  • Recalculating CRC Values
  • User-Defined RADIUS Vendors and VSA Sets
    • About User-Defined RADIUS Vendors and VSA Sets
    • Adding a Custom RADIUS Vendor and VSA Set
    • Deleting a Custom RADIUS Vendor and VSA Set
    • Listing Custom RADIUS Vendors
    • Exporting Custom RADIUS Vendor and VSA Sets
    • RADIUS Vendor/VSA Import File
      • About the RADIUS Vendor/VSA Import File
      • Vendor and VSA Set Definition
      • Attribute Definition
      • Enumeration Definition
      • Example RADIUS Vendor/VSA Import File
  • PAC File Generation
    • PAC File Options and Examples
    • Generating PAC Files
  • Posture Validation Attributes
    • Posture Validation Attribute Definition File
    • Exporting Posture Validation Attribute Definitions
    • Importing Posture Validation Attribute Definitions
    • Deleting a Posture Validation Attribute Definition
    • Default Posture Validation Attribute Definition File
• VPDN Processing
  • VPDN Process
• RDBMS Synchronization Import Definitions
  • accountActions Specification
    • accountActions Format
    • accountActions Mandatory Fields
    • accountActions Processing Order
  • Action Codes
    • Action Codes for Setting and Deleting Values
    • Action Codes for Creating and Modifying User Accounts
    • Action Codes for Initializing and Modifying Access Filters
    • Action Codes for Modifying TACACS+ and RADIUS Group and User Settings
    • Action Codes for Modifying Network Configuration
  • CiscoSecure ACS Attributes and Action Codes
    • User-Specific Attributes
    • User-Defined Attributes
    • Group-Specific Attributes
  • An Example of accountActions
• Internal Architecture
  • Windows Services
  • Windows Registry
  • CSAdmin
  • CSAuth
  • CSDBSync
  • CSLog
  • CSMon
    • Monitoring
    • Recording
    • Notification
    • Response
  • CSTacacs and CSRadius
• Index