Cisco Acs 5x User Guide

Contents
xxi
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
EAP Authentication with RADIUS Key WrapB-29
EAP-MSCHAPv2B-30
Overview of EAP-MSCHAPv2B-30
MSCHAPv2 for User AuthenticationB-30
MSCHAPv2 for Change PasswordB-30
Windows Machine Authentication Against ADB-31
EAP- MSCHAPv2 Flow in ACS 5.3B-31
CHAPB-31
LEAPB-31
Certificate AttributesB-32
Certificate Binary ComparisonB-32
Rules Relating to Textual AttributesB-33
Certificate RevocationB-33
Machine AuthenticationB-34
Authentication...

Contents
xxii
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01 

1
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Preface
Revised: September 8, 2016
This guide describes how to use Cisco Secure Access Control System (ACS) 5.3.
Audience
This guide is for security administrators who use ACS, and who set up and maintain network and 
application security.
Document Conventions
This guide uses the convention whereby the symbol ^ represents the key labeled Control. For example, 
the key combination ^z means hold down the Control key while you press the...

2
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Preface
  
CautionMeans reader be careful. You are capable of doing something that might result in equipment damage or 
loss of data.
TimesaverMeans the described action saves time. You can save time by performing the action described in the 
paragraph.
NoteMeans reader take note. Notes identify important information that you should reflect upon before 
continuing, contain helpful suggestions, or provide references to materials not...

3
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Preface
  
NoteWe sometimes update the printed and electronic documentation after original publication. Therefore, 
you should also review the documentation on Cisco.com for any updates.
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional 
information, see the monthly What’s New in Cisco Product Documentation, which also lists all new...

4
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Preface
   

CH A P T E R
1-1
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
1
Introducing ACS 5.3
This section contains the following topics:
Overview of ACS, page 1-1
ACS Distributed Deployment, page 1-2
ACS Management Interfaces, page 1-3
Overview of ACS
ACS is a policy-based security server that provides standards-compliant Authentication, Authorization, 
and Accounting (AAA) services to your network. ACS facilitates the administrative management of 
Cisco and non-Cisco devices and...

1-2
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 1      Introducing ACS 5.3
  ACS Distributed Deployment
ACS provides advanced monitoring, reporting, and troubleshooting tools that help you administer and 
manage your ACS deployments. For more information on the monitoring, reporting, and troubleshooting 
capabilities of ACS, see Chapter 11, “Monitoring and Reporting in ACS.”.
For more information about using ACS for device administration and network access scenarios, see...

1-3
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 1      Introducing ACS 5.3
  ACS Licensing Model
ACS 4.x did not provide incremental replication, only full replication, and there was service downtime 
for replication. ACS 5.3 provides incremental replications with no service downtime. 
You can also force a full replication to the secondary instance if configuration changes do not replicate 
it. Full replication is used when a new secondary instance is registered and other...

1-4
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 1      Introducing ACS 5.3
  ACS Management Interfaces
ACS Web-based Interface
You can use the ACS web-based interface to fully configure your ACS deployment, and perform 
monitoring and reporting operations. The web interface provides a consistent user experience, regardless 
of the particular area that you are configuring. 
The ACS web interface is supported on HTTPS-enabled Microsoft Internet Explorer, versions 7.x, 8.x,...