3Com SuperStack 4, Configuration Manual

Page: 409 / 432

C
A
UTHENTICATING THE
S
WITCH
5500G-EI
WITH
C
ISCO
S
ECURE
ACS
This appendix covers the following topics:
■
Cisco Secure ACS () and the 3Com Switch 5500G-EI
■
Setting Up the Cisco Secure ACS () server
Cisco Secure ACS
() and the
3Com Switch 5500G-EI
Cisco Secure ACS and are proprietary protocols and software created by
Cisco, they provide similar functionality to a RADIUS server. Enterprises which
contain a Cisco Secure ACS server with to provide centralised control
over network and management access, can also deploy the 3Com Switch
5500G-EI on their network.
Although 3Com does not directly support the proprietary protocol,
3Com switches can still be authenticated in networks which use and
Cisco Secure ACS. The windows based Cisco Secure ACS server contains a built-in
RADIUS server. This RADIUS server integrates seamlessly with the TACACS
database allowing 3Com switches to authenticate correctly using the RADIUS
protocol. Users that already exist on the server can be authorised using
the or RADIUS server, an optional VLAN and QoS profile can be applied
to the user. Network administrators can also be authorised using the built in
RADIUS server, providing centralised access to 3Com switches.
The remainder of this appendix describes how to setup Cisco Secure ACS (v3.3) to
operate using RADIUS with a 3Com switch.
Setting Up the Cisco
Secure ACS ()
server
Configure the Cisco Secure ACS server through the web interface. Log into the
web interface from any PC or localhost of the server, using port 2002 . For
example:
http://TACACS-server:2002
The following sections detail the steps required to configure the Cisco Secure ACS
() server to authenticate a Switch 5500G-EI on your network and allow
any additional users to login to the nework:
■
Adding a 3Com Switch 5500G-EI as a RADIUS client
■
Adding a User for Network Login
The final section details how to add a User (Network Administrator) for Switch
Login to enable centralised management of the switch through the Cisco Secure
ACS server.
■
Adding a User for Switch Login