Introduction and Features
Cisco Secure ACS for Windows is AAA server software that provides centralized
user authentication, authorization, and accounting for arrangement accessories that act as
AAA clients, such as routers, NASs,VPN gateways, wireless admission points, and
firewalls. It accompanying supports both the TACACS+ and RADIUS protocols,
allowing you to use the agreement that is best adapted for anniversary client. For
instance, you could use TACACS+ command allotment for routers and firewalls
and use RADIUS affidavit for VPN access.
Cisco Secure ACS is additionally awful scalable, accouterment abutment for up to 500,000
users and 2000 AAA clients. An AAA server such as Cisco Secure ACS can
quickly become a analytical allotment of your infrastructure.To ensure the availability of
AAA services, Cisco Secure ACS supports database archetype to added ACS
servers. If one server goes down, others are accessible to accommodate AAA services
with accepted information.You can carbon all or genitalia of the database and
can configure archetype to be performed automatically at specific times (for
example, every 60 minutes) or manually. For beyond implementations, you can also
configure a bureaucracy of servers for which archetype to accessory servers is initiated
when a primary server completes its replication. Cisco Secure ACS provides
a Web-based graphical interface, giving you the adaptability of managing the server
remotely.Through the ACS interface, you can ascertain users, groups of users,AAA
clients, and alien affidavit databases.While Cisco Secure ACS includes
its own centralized user database, it additionally supports affidavit adjoin the following
external user databases:
Windows NT/2000 User Database
Generic LDAP
Novell NetWare Directory Casework (NDS)
Open Database Connectivity (ODBC) adjustable relational databases
CRYPTOCard badge server
SafeWord badge server
www.syngress.com
230 Chapter 5 • Authentication, Authorization, and Accounting
AXENT badge server
RSA SecureID badge server
ActivCard badge server
Vasco badge server