Buy Cisco Access Control Security by Brandon Carroll
Book 1
Book 2
Book 3
Book 1
Book 2
Book 3
Book 1
Book 2
Book 3
Book 1
Book 2
Book 3
Home > Computing and Information Technology > Computer networking and communications > Networking packages > Cisco Access Control Security: AAA Administration Services
Cisco Access Control Security: AAA Administration Services

Cisco Access Control Security: AAA Administration Services


     0     
5
4
3
2
1



Out of Stock


Notify me when this book is in stock
X
About the Book

Hands-on techniques for enabling authentication, authorization, and accounting Understand the security concepts behind the AAA framework Learn message formats, communication, and message encryption using the TACACS+ and RADIUS protocols Configure and troubleshoot AAA on Cisco routers Understand where to position and install the CSACS in your network Explore and customize the CSACS interface Configure CSACS user accounts, user groups, and shared profile components Add AAA clients and manage network connections Configure external databases and perform database replication and backup Explore the various reports and logs available in CSACS Learn how AAA models apply to service provider environments Install and configure Cisco Access Registrar As network infrastructures evolve, it is increasingly important that access to vital corporate resources is vigilantly monitored and controlled. The Cisco identity management solutions, including Cisco Secure Access Control Server (CSACS), address this requirement, enabling security, control, and administration of the growing population of users that connect to corporate networks. CSACS, an essential component of the Cisco Identity Based Networking Services (IBNS) architecture, extends access security by combining authentication, user and administrator access, and policy control from a centralized identity-networking framework. This allows greater flexibility and mobility, increased security, and user productivity gains. Cisco Access Control Security provides you with the skills needed to configure authentication, authorization, and accounting (AAA) services on Cisco devices. Separated into three parts, this book presents hard-to-find configuration details of centralized identity networking solutions. Part I provides an overview of the AAA architecture, complete with discussions of configuring Cisco routers for AAA. Part II addresses enterprise AAA management with CSACS, including installation, configuration, and management details. Part III looks at service provider AAA management with Cisco Access Registrar. Full of detailed overviews, diagrams, and step-by-step instructions for enabling essential access control solutions, Cisco Access Control Security is a practical tool that can help enforce assigned access policies and simplify user management. "This book manages the rare combination of being highly accurate and technically astute, while maintaining an easy readability and flow. It is a great guide for system administrators looking to design or manage a reliable, scalable, and secure Access Control deployment for any size organization." -Jeremy Steiglitz, ACS Group Product Manager, Cisco Systems This book is part of the Networking Technology Series from Cisco Press, which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.

Table of Contents:
I. AAA OVERVIEW. 1. Authentication, Authorization, and Accounting Overview. Authentication Overview. Authentication Example. Authorization Overview. Authorization Example. Accounting Overview. Connection Accounting. EXEC Accounting. System Accounting. Command Accounting. Resource Accounting. Accounting Example. Cisco Device Support for AAA. Summary. End Notes. 2. TACACS+ and RADIUS. A Brief Overview of TACACS+. A Brief Overview of RADIUS. TACACS+ in Detail. TACACS+ Communication. TACACS+ Format and Header Values. Encrypting TACACS+. TACACS+ Operation. TACACS+ and Authorization. TACACS+ Accounting. RADIUS in Detail. RADIUS Encryption. RADIUS Authentication and Authorization. RADIUS Accounting. Summary. End Notes. 3. Authentication Configuration on Cisco Routers. Local Authentication. Method Lists. Authentication Configurations Using Cisco Secure ACS for Windows Server and Cisco Secure ACS Solution Engine. Debugging Authentication. Authentication Command References. Summary. II. ENTERPRISE AAA AND CISCO SECURE ACCESS CONTROL SERVER. 4. Enterprise Authentication Servers. Cisco Secure Access Control Server Software and Versions. Cisco Secure ACS for Windows Server Version 2.1. Cisco Secure ACS for Windows Server Version 2.3. Cisco Secure ACS for Windows Server Version 2.4 and 2.5. Cisco Secure ACS for Windows Server Version 2.6. Cisco Secure ACS for Windows Server Version 3.0. Cisco Secure ACS for Windows Server Version 3.1. Cisco Secure ACS for Windows Server Version 3.2. Cisco Secure Solution Engine. Summary. 5. Deploying Cisco Secure Access Control Server for Windows Server. What Is ACS? How to Obtain ACS. Requirements to Run ACS Version 3.2. Installing ACS. Reinstalling ACS and Using an Existing ACS Database. Positioning ACS in Your Network. Virtual Private Networks. Wireless Deployment. Other Deployments. Summary. 6. Getting Familiar with CSACS. Navigating the HTML Interface. Group Setup. Shared Profile Components. Network Configuration. System Configuration. Interface Configuration. Administration Control. External User Database. Reports and Activity. Online Documentation. Starting Point for Configuring Your Server. Configuring Your Interface. Advanced Options. Preparing to Add Users. Summary. 7. Configuring User Accounts. Adding Users to the Database. Adding a New AAA Client. User Changeable Passwords. Preparing ACS for UCP. Enabling SSL on the Web Server. Installing the UCP Module. Authenticating Users to a Windows NT/2000 Database. Authentication and Password Options. User Callback and Client IP Assignment. Advanced Configurations. Configuring Switches. Enable an Administrative Policy. Summary. End Notes. 8. Configuring User Groups. Group-Level Configuration of ACS. Configuring Voice over IP Support. Configuring Time-of-Day Access Settings. PPP Callback Configuration. Configuring Network Access Restrictions. Configuring the NAR. Applying a NAR to a User. A Look at Shared Network Access Restrictions. Max Sessions, Usage Quotas, and Password Aging Rules. Usage Quotas. Password Aging Rules. IP Assignment and Downloadable ACLs. Downloadable IP ACLs. Using TACACS+ for Group Configuration. Shell Command Authorization Sets. User-Level Authorization. Summary. End Notes. 9. Managing Network Configurations. Configuring a Distributed System. Configuring Network Device Groups. Configuring Proxy Distribution Tables. Using Remote Accounting. Using Network Device Searches. Creating a Complete Distributed Network. Client Configuration. Cisco IOS Switches. Cisco Set-Based Switches. Cisco PIX Firewalls. Cisco 3000 Series VPN Concentrators. Cisco Wireless Access Points. Troubleshooting Network Configurations. Summary. 10. Configuring Shared Profile Components. Downloadable ACLs. Creating an ACL. Working with ACLs After They Are Created. Network Access Restrictions. Working with NARs. Non-IP-Based NARs. Configuring Network Access Restrictions. Configuration Details and Tips. Creating a Non-IP-Based NAR. Editing Shared NARs. Deleting a Shared NAR. Command Authorization Sets. PIX Command Authorization Sets Versus Shell Command Authorization Sets. Configuration Considerations for Command Authorization Sets. PIX Firewall Preparation for Command Authorization. Configuring Shared Profile Components for Command Authorization. Deleting Command Authorization Sets. Editing Shell Command Authorization Sets. Configuring the Group Profile. Configuring the User Profile. Testing Command Authorization. Troubleshooting Extended Configurations. Troubleshooting Existing Downloadable ACL Configurations. Troubleshooting New NAR Configurations. Troubleshooting Existing NAR Configurations. Troubleshooting New Command Authorization Set Configurations. Troubleshooting Existing Command Authorization Set Configurations. Common Issues of Network Access Restrictions. And Do Not Forget the Importance of Documentation. Summary. 11. System Configuration. How Users Interact with Your External Database Configuration. External Database Configuration. Windows NT/2000. Novell NDS. Generic LDAP. External ODBC Database. LEAP Proxy RADIUS Server. RADIUS Token Server. VASCO Token Server. ActivCard Token Server. PassGo Defender Token Server. CRYPTOCard Token Server. SafeWord Token Server. RSA SecurID Token Server. Database Group Mappings. Unknown User Policy. Database Replication. Understanding Database Replication. Replication Versus Backup. Configuring the Primary Server. Configuring a Secondary Server. Immediate Replication. Backing Up the Cisco Secure Database. Manual Backups. Scheduled Backups. Canceling a Scheduled Backup. Recovering ACS from a Backup file. Synchronization of ACS Devices. Components of Synchronization. accountActions Table. CSDBSync and accountActions Table Working Together. Preparing for Synchronization. RDBMS Synchronization Options. Summary. End Notes. 12. Reports and Logging for Windows Server. ACS Reports. Logging Attributes in ACS Reports. User-Defined Attributes. Access Device. Network Device Group. Device Command Set. Filter Information. ExtDB Info. ACS Reports. Accounting Reports. RADIUS Accounting. VoIP Accounting. Failed Attempts Report. Passed Authentications Report. Administrative Reports. TACACS+ Administration Report. Logged-In Users and Disabled Accounts Reports. System Reports. RDBMS Synchronization. Database Replication. Administration Audit. User Password Changes. ACS Service Monitoring. Remote Logging with ACS. Configuring the Remote ACS to Send Logging Information. Disabling Remote Logging. Additional Logs Maintained by ACS. Configuring Service Log Options. Summary. 13. Exploring TACACS+ Attribute Values. TACACS+ AV Pairs Overview. Attributes of TACACS+ AV Pairs. acl=. addr=. addr-pool=. autocmd=. callback-dialstring=, callback-line=, and callback-rotary=. cmd=. cmd-arg=. dns-servers=. gw-password=. idletime=. inacl#n. inacl=. interface-config#. ip-addresses=. link-compression=. load-threshold=n. max-links=n. nas-password. nocallback-verify. noescape=. nohangup=. old-prompts=. outacl=. outacl#n. pool-def#n. pool-timeout=. ppp-vj-slot-compression=. priv-lvl=. protocol=. route=. route#n. routing=. rte-ftr-in#n. rte-ftr-out#n. sap-fltr-in#n. sap-fltr-out#n. sap#n. service=. source-ip=. timeout=. tunnel-id. wins-servers=. zonelist=. AV Pair Example PPP Network. Applying an ACL to the Dial Interface. Understanding TACACS+ AV Pairs in the ACS Interface. AV Pair Discussion #2. AV Pair Discussion #3. AV Pair Discussion #4. AV Pair Discussion #5. Summary. III. SERVICE PROVIDER AAA AND THE CISCO ACCESS REGISTRAR. 14. Service Provider AAA and the Cisco CNS Access Registrar. Service Provider (SP) Model. Service Provider Challenge. Value Added Services. Cisco CNS Access Registrar. Options of AR. AR's Architecture. Policy Engine. Extension Points. Extension Point Scripting Examples. Proxy AAA. AAA. Installation Requirements for AR on Solaris 8. Installing AR. AR's Subdirectories. Configuring Cisco CNS AR. Summary. End Notes. 15. Configuring the Cisco Access Registrar. Using aregcmd to Configure AR. Categories of aregcmd Commands. Object Commands. Property Commands. Server Commands. Application Commands. Session Management Commands. AR's Server Object Hierarchy. Configuring the ACE ISP as a Basic Site. Configuring AR's Administrators. Configuring the RADIUS Server. Checking the System-Level Defaults. Displaying the UserLists. Working with Users. Displaying and Configuring UserGroups. Configuring AAA Clients in AR. Configuring Profiles. Validating and Saving Your Changes to AR. Testing Your Configuration. Troubleshooting Your Configuration with trace. Summary. End Notes. IV. APPENDIX. Appendix A: RADIUS Attribute Tables.

About the Author :
Brandon J. Carroll is a certified Cisco Systems instructor with Ascolta Training Company, where he teaches and develops a variety of Cisco security, routing, and switching courses. Prior to joining Ascolta, he was an ADSL specialist with GTE Network Services, as well as a technical lead/trainer and field engineer.


Best Sellers


Product Details
  • ISBN-13: 9781587053733
  • Publisher: Pearson Education (US)
  • Publisher Imprint: Cisco Press
  • Language: English
  • Weight: 1 gr
  • ISBN-10: 158705373X
  • Publisher Date: 27 May 2004
  • Binding: Digital download
  • Sub Title: AAA Administration Services


Similar Products

Add Photo
Add Photo

Customer Reviews

REVIEWS      0     
Click Here To Be The First to Review this Product
Cisco Access Control Security: AAA Administration Services
Pearson Education (US) -
Cisco Access Control Security: AAA Administration Services
Writing guidlines
We want to publish your review, so please:
  • keep your review on the product. Review's that defame author's character will be rejected.
  • Keep your review focused on the product.
  • Avoid writing about customer service. contact us instead if you have issue requiring immediate attention.
  • Refrain from mentioning competitors or the specific price you paid for the product.
  • Do not include any personally identifiable information, such as full names.

Cisco Access Control Security: AAA Administration Services

Required fields are marked with *

Review Title*
Review
    Add Photo Add up to 6 photos
    Would you recommend this product to a friend?
    Tag this Book Read more
    Does your review contain spoilers?
    What type of reader best describes you?
    I agree to the terms & conditions
    You may receive emails regarding this submission. Any emails will include the ability to opt-out of future communications.

    CUSTOMER RATINGS AND REVIEWS AND QUESTIONS AND ANSWERS TERMS OF USE

    These Terms of Use govern your conduct associated with the Customer Ratings and Reviews and/or Questions and Answers service offered by Bookswagon (the "CRR Service").


    By submitting any content to Bookswagon, you guarantee that:
    • You are the sole author and owner of the intellectual property rights in the content;
    • All "moral rights" that you may have in such content have been voluntarily waived by you;
    • All content that you post is accurate;
    • You are at least 13 years old;
    • Use of the content you supply does not violate these Terms of Use and will not cause injury to any person or entity.
    You further agree that you may not submit any content:
    • That is known by you to be false, inaccurate or misleading;
    • That infringes any third party's copyright, patent, trademark, trade secret or other proprietary rights or rights of publicity or privacy;
    • That violates any law, statute, ordinance or regulation (including, but not limited to, those governing, consumer protection, unfair competition, anti-discrimination or false advertising);
    • That is, or may reasonably be considered to be, defamatory, libelous, hateful, racially or religiously biased or offensive, unlawfully threatening or unlawfully harassing to any individual, partnership or corporation;
    • For which you were compensated or granted any consideration by any unapproved third party;
    • That includes any information that references other websites, addresses, email addresses, contact information or phone numbers;
    • That contains any computer viruses, worms or other potentially damaging computer programs or files.
    You agree to indemnify and hold Bookswagon (and its officers, directors, agents, subsidiaries, joint ventures, employees and third-party service providers, including but not limited to Bazaarvoice, Inc.), harmless from all claims, demands, and damages (actual and consequential) of every kind and nature, known and unknown including reasonable attorneys' fees, arising out of a breach of your representations and warranties set forth above, or your violation of any law or the rights of a third party.


    For any content that you submit, you grant Bookswagon a perpetual, irrevocable, royalty-free, transferable right and license to use, copy, modify, delete in its entirety, adapt, publish, translate, create derivative works from and/or sell, transfer, and/or distribute such content and/or incorporate such content into any form, medium or technology throughout the world without compensation to you. Additionally,  Bookswagon may transfer or share any personal information that you submit with its third-party service providers, including but not limited to Bazaarvoice, Inc. in accordance with  Privacy Policy


    All content that you submit may be used at Bookswagon's sole discretion. Bookswagon reserves the right to change, condense, withhold publication, remove or delete any content on Bookswagon's website that Bookswagon deems, in its sole discretion, to violate the content guidelines or any other provision of these Terms of Use.  Bookswagon does not guarantee that you will have any recourse through Bookswagon to edit or delete any content you have submitted. Ratings and written comments are generally posted within two to four business days. However, Bookswagon reserves the right to remove or to refuse to post any submission to the extent authorized by law. You acknowledge that you, not Bookswagon, are responsible for the contents of your submission. None of the content that you submit shall be subject to any obligation of confidence on the part of Bookswagon, its agents, subsidiaries, affiliates, partners or third party service providers (including but not limited to Bazaarvoice, Inc.)and their respective directors, officers and employees.

    Accept

    Fresh on the Shelf


    Inspired by your browsing history


    Your review has been submitted!

    You've already reviewed this product!