IBM Tivoli and Cisco, User Manual

Page: 60 / 516

42
Building a Network Access Control Solution with IBM Tivoli and Cisco Systems
for network devices and other services. The various components that constitute
the ACS and a brief description of their functions are discussed here.
The ACS architecture consists of seven services bundled within ACS. Figure 3-2
shows the internal ACS components and their functions.
Figure 3-2 ACS architecture
Here are brief explanations for the ACS services:
CSAdmin Provides an HTML interface for administration of ACS
CSAuth Provides authentication services
CSDBSync Provides synchronization of the internal ACS user database
with third-party external RDBMS applications
CSlog Provides logging services both for accounting and system
activity
CSTacacs Provides communication between AAA clients and
the CSAuth service
CSRadius Provides communication between RADIUS AAA clients and
the CSAuth service
CSMon Provides monitoring, recording, and notification of ACS
performance and includes automatic response to some
scenarios
CSAdmin
CSAuth
CSDBSync
CSlog
CSTacacs
CSRadius
CSMon
Administration
Authentication
External DB
sync
Logging
TACACS
communication
Monitoring
RADIUS
communication
Service Function