Adding A Aaa Client - Cisco 2509 - Router - EN User Manual

Chapter 4 Setting Up and Managing Network Configuration

Adding a AAA Client

78-14696-01, Version 3.1
RADIUS (Nortel)—RADIUS using Nortel RADIUS VSAs. Select this
–
option if the network device is a Nortel network device supporting
authentication via RADIUS.
RADIUS (iPass)—RADIUS for AAA clients using iPass RADIUS.
–
Select this option if the network device is an iPass network device
supporting authentication via RADIUS. iPass RADIUS is identical to
IETF RADIUS.
Single Connect TACACS+ AAA Client (Record stop in accounting on
•
failure)—If you select TACACS+ (Cisco IOS) from the Authenticate Using
list, you can use this option to specify that Cisco Secure ACS use a single
TCP connection for all TACACS+ communication with the AAA client,
rather than a new one for every TACACS+ request. In single connection
mode, multiple requests from a network device are multiplexed over a single
TCP session.
Note If TCP connections between Cisco Secure ACS and the AAA client are
unreliable, do not use this feature.
Log Update/Watchdog Packets from this AAA Client—Enables logging of
•
update, or watchdog, packets. Watchdog packets are interim packets sent
periodically during a session. They serve to enable an approximation of
session length if the AAA client fails and, thereby, no stop packet is received
to mark the end of the session.
• Log RADIUS Tunneling Packets from this AAA Client—Enables logging
of RADIUS tunneling accounting packets. Packets are recorded in the
RADIUS Accounting reports of Reports and Activity.
You can use this procedure to add a AAA client configuration.
Before You Begin
For descriptions of the options available while adding a AAA client configuration,
see AAA Client Configuration Options, page 4-11.
User Guide for Cisco Secure ACS for Windows Server
AAA Client Configuration
4-15