4-15
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 4 Setting Up and Managing Network Configuration
AAA Client Configuration
–
RADIUS (Nortel)—RADIUS using Nortel RADIUS VSAs. Select this
option if the network device is a Nortel network device supporting
authentication via RADIUS.
–
RADIUS (iPass)—RADIUS for AAA clients using iPass RADIUS.
Select this option if the network device is an iPass network device
supporting authentication via RADIUS. iPass RADIUS is identical to
IETF RADIUS.
•
Single Connect AAA Client (Record stop in accounting on
failure)—If you select (Cisco IOS) from the Authenticate Using
list, you can use this option to specify that Cisco Secure ACS use a single
TCP connection for all communication with the AAA client,
rather than a new one for every request. In single connection
mode, multiple requests from a network device are multiplexed over a single
TCP session.
Note
If TCP connections between Cisco Secure ACS and the AAA client are
unreliable, do not use this feature.
•
Log Update/Watchdog Packets from this AAA Client—Enables logging of
update, or watchdog, packets. Watchdog packets are interim packets sent
periodically during a session. They serve to enable an approximation of
session length if the AAA client fails and, thereby, no stop packet is received
to mark the end of the session.
•
Log RADIUS Tunneling Packets from this AAA Client—Enables logging
of RADIUS tunneling accounting packets. Packets are recorded in the
RADIUS Accounting reports of Reports and Activity.
Adding a AAA Client
You can use this procedure to add a AAA client configuration.
Before You Begin
For descriptions of the options available while adding a AAA client configuration,
see
AAA Client Configuration Options, page 4-11
.