Cisco 3.3 User Manual page 566

Token Server User Databases
c.
Under External User Database Configuration, select the name of the
Step 5
RADIUS-enabled token server you need to configure.
Note
Click Configure.
Step 6
In the RADIUS Configuration table, type the required information in the
Step 7
following boxes:
User Guide for Cisco Secure ACS for Windows Server
13-82
Click Submit.
Cisco Secure ACS lists the new configuration in the External User Database
Configuration table.
If only one RADIUS-enabled token server configuration exists, the name
of that configuration appears instead of the list. Proceed to
Primary Server Name/IP—The hostname or IP address of the primary
•
RADIUS token server. If you provide the hostname, the hostname must be
resolvable by DNS.
• Secondary Server Name/IP—The hostname or IP address of the secondary
RADIUS token server. If you provide the hostname, the hostname must be
resolvable by DNS.
Shared Secret—The shared secret of the RADIUS server. This must be
•
identical to the shared secret with which the RADIUS token server is
configured.
Authentication Port—The UDP port over which the RADIUS server
•
conducts authentication sessions. If the RADIUS token server is installed on
the same Windows server as Cisco Secure ACS, this port should not be the
same port used by Cisco Secure ACS for RADIUS authentication. For more
information about the ports used by Cisco Secure ACS for RADIUS, see
RADIUS, page 1-7.
For Cisco Secure ACS to send RADIUS OTP messages to a
Note
RADIUS-enabled token server, you must ensure that gateway devices
between the RADIUS-enabled token server and Cisco Secure ACS
allow communication over the UDP port specified in the
Authentication Port box.
Chapter 13 User Databases
Step 6.
78-16592-01