Specifications
1-25
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 1 Introduction
Admin Console Summary
The User Management module allows you to:
• Create normal login user roles to associate groups of users with authentication parameters, traffic
control policies, session timeouts, and bandwidth limitations. If using role-based configuration
for OOB Port Profiles, you can configure the Access VLAN via the user role.
• Add IP and host-based traffic control policies to configure network access for all the user roles.
Configure traffic policies/session timeout for the Agent Temporary role and Quarantine role(s) to
limit network access if a client device fails requirements or is found to have network scanning
vulnerabilities.
• Add Auth Servers to the CAM (configure external authentication sources on your network).
• Add auth sources such as Active Directory SSO and Cisco VPN SSO to enable Single Sign-On
(SSO) when the CAS is configured for AD SSO or Cisco VPN Concentrator integration.
• Create complex mapping rules to map users to user roles based on LDAP or RADIUS attributes,
or VLAN IDs.
• Perform RADIUS accounting.
• Create local users authenticated internally by the CAM (for testing)
For details see:
–
Chapter 6, “User Management: Configuring User Roles and Local Users”
–
Chapter 7, “User Management: Configuring Authentication Servers”
–
Chapter 8, “User Management: Traffic Control, Bandwidth, Schedule”
For additional details on Cisco VPN Concentrator integration, see the Cisco NAC Appliance - Clean
Access Server Configuration Guide, Release 4.9(x).
The Monitoring module allows you to:
• View a status summary of your deployment.
• View the current system information and preset reports.
• Manage In-Band and Out-of-Band online users.
• View, search, and redirect Clean Access Manager event logs.
• Configure basic SNMP polling and alerting for the Clean Access Manager
See Chapter 13, “Monitoring Event Logs”.
Table 1-4 Summary of Modules in Clean Access Manager Web Admin Console (continued)
Module Module Description