Cisco 500 Series, Configuration Manual

Page: 728 / 1140

33-10
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 33 Configuring Network Admission Control
Changing Global NAC Framework Settings
You can specify only the username, only the password, or both. For example, enter the following
commands to change the username and password for clientless authentication to sherlock and
221B-baker, respectively:
hostname(config)# eou clientless username sherlock
hostname(config)#
eou clientless password 221B-baker
hostname(config)#
To change the username to its default value, enter the following command:
no eou clientless username
For example:
hostname(config)# no eou clientless username
hostname(config)#
To change the password to its default value, enter the following command:
no eou clientless password
For example:
hostname(config)# no eou clientless password
hostname(config)#
Changing NAC Framework Session Attributes
The ASA provides default settings for the attributes that specify communications between the security
appliance and the remote host. These attributes specify the port no. to communicate with posture agents
on remote hosts and the expiration counters that impose limits on the communications with the posture
agents. These attributes, the default settings, and the commands you can enter to change them are as
follows:
• Port no. on the client endpoint to be used for EAP over UDP communication with posture agents.
The default port no. is 21862. Enter the following command in global communication mode to
change it:
eou port port_number
port_number must match the port number configured on the CTA. Enter a value in the range 1024
to 65535.
For example, enter the following command to change the port number for EAP over UDP
communication to 62445:
hostname(config)# eou port 62445
hostname(config)#
To change the port number to its default value, use the no form of this command, as follows:
no eou port
For example:
hostname(config)# no eou port
hostname(config)#