User guide

Cisco ACS RADIUS Server
278
18. EnsurethattheActiveDirectory/LocalaccountfortheuserhasDial
Inaccessenabledintheiruserprofile. IftheWindows2000Domain
serverisinNativeModeandIASisregisteredwiththeActive
Directory,youcansettheUserProfile>DialInsettingtouseRem
ote
AccessPolicies.
Cisco ACS RADIUS Server
TheCiscoAccessControlServer(ACS)isanotherauthenticationsolution
supportedbytheDominionSXunit.FortheDominionSXtosupport
RADIUS,boththeunitandtheuserinformationmustbeaddedintothe
RADIUSconfiguration.
Configure the Dominion SX to use a Cisco ACS Server
ThefollowingprocedureconfigurestheDominionSXunittoworkwitha
CiscoRadiusServer.
1. ChooseUserManagement>Configuration>UserGroupListon
DSX.
2. ClickAddNewUserGroup.
Youcandefineportaccessanduserclass(operatororobserver).Thisuser
groupwillbeusedlaterasava
luetotheFilter‐Ida
ttributeontheCisco
RadiusServer.TheDominionSXcomeswithfactorydefaultgroup
Adminthatwillbeusedasanexampleinthissection;however,anylocal
groupcanbeusedasvaluetotheFilter‐IdattributeontheCiscoACS
Server.
Notes:Groupnamesarecas
esen
sitiveandmustmatchexactlythose
definedinthe
Filter‐IdattributeontheRadiusserver.
OnlyVersion3.1oftheCiscoRadiusServerhasbeentested;however,
otherversionsoftheRADIUSservershouldoperatewiththeDSX.
Configure the Cisco ACS Server
1. LogontoCiscoACSServerusingthebrowser.
2. TypeyourUsernameandPassword.
3. ClickLogin.
4. ClickNetworkConfigurationintheleftpanelofthescreenandselect
AddEntrytoadd/editanAAAClient.Thismustbedoneforeach
unitthatisgoingtobeacce
ssedvi
aRADIUS.