Cisco Acs 57 User Guide

1
Cisco Systems, Inc.www.cisco.com
 
Post-Installation Configuration Tasks
This chapter provides a set of configuration tasks that you must perform to work with ACS. This chapter contains the 
following sections:
Configuring Minimal System Setup, page 1
Configuring ACS to Perform System Administration Tasks, page 1
Configuring ACS to Manage Access Policies, page 3
Configuring ACS to Monitor and Troubleshoot Problems in the Network, page 4
Configuring Minimal System Setup
Table 25 on page 1 lists the...

2
Post-Installation Configuration Tasks
 
Configuring ACS to Perform System Administration Tasks
Table 26 System Administration Tasks
Step No. Task Drawer Refer to...
Step 1 Install ACS license.System Administration > 
Configuration > LicensingLicensing Overview, page 36.
Step 2 Install system certificates.System Administration > 
Configuration > Local Server 
Certificates > Local 
CertificatesConfiguring Local Server 
Certificates, page 16.
Step 3 Configure password policy rules 
for administrators and...

3   
Post-Installation Configuration Tasks
Configuring ACS to Manage Access Policies
Configuring ACS to Manage Access Policies
Table 27 on page 4 lists the set of tasks that you must perform to manage access restrictions and permissions. Step 8 Add users or hosts to the internal 
identity store, or define external 
identity stores, or both.For internal identity stores:
Users and Identity Stores > 
Internal Identity Stores
For external identity stores:
Users and Identity Stores > 
External Identity...

4
Post-Installation Configuration Tasks
 
Configuring ACS to Monitor and Troubleshoot Problems in the Network
Configuring ACS to Monitor and Troubleshoot Problems in the Network
Table 28 on page 4 lists a set of configuration tasks that you must perform to troubleshoot the Monitoring and Report 
Viewer. 
Table 27 Managing Access Policies
Step No. Task Drawer Refer to...
Step 1 Define policy conditions.Policy Elements > Session 
ConditionsManaging Policy Conditions, 
page 1.
Step 2 Define authorization...

5   
Post-Installation Configuration Tasks
Configuring ACS to Monitor and Troubleshoot Problems in the Network
Step 5 Define schedules and create 
threshold alarms.Monitoring and Reports > 
AlarmsTo configure schedules:
Understanding Alarm 
Schedules, page 8.
To create threshold alarms:
Creating, Editing, and 
Duplicating Alarm 
Thresholds, page 10.
Step 6 Configure alarm syslog targets.Monitoring Configuration > 
System Configuration > Alarm 
Syslog TargetsConfiguring Alarm Syslog 
Targets, page 19....

6
Post-Installation Configuration Tasks
 
Configuring ACS to Monitor and Troubleshoot Problems in the Network 

1
Cisco Systems, Inc.www.cisco.com
 
Managing Network Resources
The Network Resources drawer defines elements within the network that issue requests to ACS or those that ACS 
interacts with as part of processing a request. This includes the network devices that issue the requests and external 
servers, such as a RADIUS server that is used as a RADIUS proxy.
This drawer allows you to configure:
Network device groups—Logically groups the network devices, which you can then use in policy conditions....

2
Managing Network Resources
 
Network Device Groups
An NDG relates to any node in the hierarchy and is the entity to which devices are associated. These nodes can be any 
node within the hierarchy, not just leaf nodes.
Note: You can have a maximum of six nodes in the NDG hierarchy, including the root node.
Related Topics
Creating, Duplicating, and Editing Network Device Groups, page 2
Deleting Network Device Groups, page 3
Creating, Duplicating, and Editing Network Device Groups
To create, duplicate,...

3   
Managing Network Resources
Network Device Groups
Deleting Network Device Groups
To delete a network device group:
1.Choose Network Resources > Network Device Groups.
The Network Device Groups page appears.
2.Check one or more check boxes the network device groups you want to delete, and click Delete.
The following error message appears:
You have requested to delete a network device group. If this group is referenced from a Policy or a 
Policy Element then the delete will be prohibited. If this group...

4
Managing Network Resources
 
Network Device Groups
5.Click Submit.
The new configuration for the network device group is saved. The Network Device Groups hierarchy page appears 
with the new network device group configuration.
Related Topics
Network Device Groups, page 1
Deleting Network Device Groups, page 3
Creating, Duplicating, and Editing Network Device Groups, page 2
Performing Bulk Operations for Network Resources and Users, page 7
Deleting Network Device Groups from a Hierarchy
To delete a...