Global authentication setup, Global – Cisco 3.3 User Manual

Page 406

Advertising
background image

Chapter 10 System Configuration: Authentication and Certificates

Global Authentication Setup

10-26

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

For information about how master key and PAC TTL values determine whether
PAC provisioning or PAC refreshing is required, see

Master Key and PAC TTLs,

page 10-21

.

Step 3

Determine whether you want to use automatic or manual PAC provisioning. For
more information about the two means of PAC provisioning, see

Automatic PAC

Provisioning, page 10-18

, and

Manual PAC Provisioning, page 10-20

.

Note

We recommend limiting the use of automatic PAC provisioning to initial
deployments of EAP-FAST, followed by using manual PAC provisioning
for adding small numbers of new end-user clients to your network and for
replacing PACs based on expired master keys.

Step 4

Using the decisions during

Step 2

and

Step 3

, enable EAP-FAST on the Global

Authentication Setup page. For detailed steps, see

Configuring Authentication

Options, page 10-33

.

Cisco Secure ACS is ready to perform EAP-FAST authentication.

Global Authentication Setup

The Global Authentication Setup page provides a means to enable or disable some
of the authentication protocols supported by Cisco Secure ACS. You can also
configure other options for some of the protocols represented on the Global
Authentication Setup page.

This section contains the following topics:

Authentication Configuration Options, page 10-27

Configuring Authentication Options, page 10-33

Advertising