Добавил:
Опубликованный материал нарушает ваши авторские права? Сообщите нам.
Вуз: Предмет: Файл:
Securing Cisco IOS Networks Study Guide - Carl Timm.pdf
Скачиваний:
73
Добавлен:
24.05.2014
Размер:
9.74 Mб
Скачать

78 Chapter 3 Configuring CiscoSecure ACS and TACACS+

CS ACS supports data importing from ODBC-compliant databases such as Microsoft Access or Oracle. Importing is done with a single table to import user and group information into one or more ACS servers.

The CSAccupdate service processes the ODBC import tables and updates local and remote CiscoSecure ACS installations.

New ACS Features

I’ve already pointed out some cool capabilities that CS ACS has to offer, but that certainly isn’t the end to the goods. It has a rich set of features that allow you to customize and control the AAA process, which is exactly your goal. Being a control freak in issues concerning network security can save your bacon. And, after all, isn’t the whole point of security to keep out those who have no good reason to be there in the first place? The following list of CS ACS features is by no means comprehensive, but it does include some of the highlights:

Password aging

User-changeable passwords

Multi-level administration

Group administration of users

User and group MaxSessions

Ability to disable an account on a specific date

Time-of-day and day-of-week access restrictions

Ability to disable an account after a certain number of failed attempts, as specified by the administrator

Ability to see logged-on users and to view detailed information for each user

Per-user TACACS+ or RADIUS attributes

Support for Voice over IP (VoIP)

Differing privilege levels for remote administrators

Windows NT Performance Monitor support for real-time statistics viewing

Configurable accounting and auditing information stored in comma-separated values (CSV) format

Authentication forwarding

Relational database management system (RDBMS) synchronization

Copyright ©2003 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501.

www.sybex.com