Downloadable Pix Acls; About Downloadable Pix Acls - Cisco 2509 - Router - EN User Manual

Hide thumbs Also See for 2509 - Router - EN:

Table of Contents

Downloadable PIX ACLs

User Guide for Cisco Secure ACS for Windows Server

command on each possible device. Creating and applying these named shared

profile components (access restrictions, command sets, and ACLs) makes it

unnecessary to repeatedly enter long lists of devices or commands when defining

network access parameters.

Shared profile components also enable Cisco Secure ACS to authorize a

command on behalf of another device or devices. Their scalability extends to the

following capabilities:

A way to determine the list of commands a user could issue against one or

more devices in the network.

A way to determine the list of devices on which a particular user may execute

a particular command.

This section describes downloadable PIX ACLs followed by detailed instructions

for configuring and managing them.

Downloadable PIX ACLs enable you to enter an ACL once, in Cisco Secure ACS,

and then load that ACL to any number of PIX Firewalls that authenticate using the

Cisco IOS/PIX protocol. This is far more efficient than directly entering the ACL

into each PIX Firewall via its CLI. No additional configuration of the

PIX Firewall is necessary after it has been configured to undertake authorization

using RADIUS.

Setting Up and Managing Shared Profile Components

78-14696-01, Version 3.1

Show Quick Links

Table of Contents