
4-4
Cisco IP Solution Center Integrated VPN Management Suite Security User Guide, 3.2
OL-5532-02
Chapter 4 Remote Access VPN Services
Adding AAA Server Devices to Your Repository
Step 4 Click Save when done. The AAA Servers page appears with the newly created AAA server displayed in
the AAA server list, as shown in Figure 4-4.
Table 4-1 Create AAA Server Fields
Field Name Type Instructions
Name text box Enter a name for the AAA server.
Owner Select button Specify whether the policy is global by clicking Global, or customer owned by
clicking Customer.
If you select Customer, you are required to specify the owner. Choose the customer
with which you want to associate the AAA server. To do this, click Customer >
Select. The Customer for IPsec Policy dialog box appears. Click the button next to
the customer you want to select and click Select (to choose that customer), or click
Cancel to exit the dialog box without saving changes. Both return you to the main
page.
IP Address text box Enter the IP address of the AAA server.
Server Type drop-down
list
Click the drop-down list and select the type of the AAA server. The type can be
RADIUS, NTDOMAIN, SDI, or TACACS+. The NTDOMAIN and SDI options are
supported for the VPN 3000 only.
Server Role drop-down
list
Click the drop-down list and select the server role for this AAA server:
• AUTHENTICATION – Use as an authentication server only.
• ACCOUNTING – Use as an accounting server only.
• BOTH – Use as an authentication and accounting server.
Port text box Enter the authentication port number if the AAA server acts as an authentication
server. The default authentication port is 1645 for a RADIUS server.
Accounting Server
Port
text box Enter the accounting port number if the AAA server acts as an accounting server. The
default accounting port is 1646 for a RADIUS server.
Timeout text box Enter the timeout in seconds for how long to wait after sending a query to the server
and receiving no response before trying again. The default is 4 seconds.
Retries text box Enter the number of times to retry sending a query to the server after the timeout
period. The default is 2.
Secret text box Enter the AAA server secret (also called the shared secret). The field displays only
asterisks.
Verify Secret text box Retype the AAA server secret. It must match what you entered in the Secret field
exactly.
Kommentare zu diesen Handbüchern