Filter
Top Products
7-18
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 7 Managing Network Resources
Configuring a Default Network Device
Choose Network Resources > Default Network Device to configure the default network device. The
Default Network Device page appears, displaying the information described in Table 7-6.
Table 7-6 Default Network Device Page
Option Description
Default Network Device
The default device definition can optionally be used in cases where no specific device definition is found that matches a
device IP address.
Default Network Device Status Choose Enabled from the drop-down list box to move the default network device to the
active state.
Network Device Groups
Location Click Select to display the Network Device Groups selection box. Click the radio button
next to the Location network device group you want to associate with the network device.
See Creating, Duplicating, and Editing Network Device Groups, page 7-2 for information
about creating network device groups.
Device Type Click Select to display the Network Device Groups selection box. Click the radio button
next to the Device Type network device group you want to associate with the network
device.
See Creating, Duplicating, and Editing Network Device Groups, page 7-2 for information
about creating network device groups.
Authentication Options
TACACS+ Check to use the Cisco IOS TACACS+ protocol to authenticate communication to and from
the network device.
You must use this option if the network device is a Cisco device-management application,
such as Management Center for Firewalls. You should use this option when the network
device is a Cisco access server, router, or firewall.
Shared Secret Shared secret of the network device, if you enabled the TACACS+ protocol.
A shared secret is an expected string of text, which a user must provide before the network
device authenticates a username and password. The connection is rejected until the user
supplies the shared secret.
Single Connect Device Check to use a single TCP connection for all TACACS+ communication with the network
device. Choose one:
• Legacy TACACS+ Single Connect Support
• TACACS+ Draft Compliant Single Connect Support
If you disable this option, ACS uses a new TCP connection for every TACACS+ request.
RADIUS Check to use the RADIUS protocol to authenticate communication to and from the network
device.
Shared Secret Shared secret of the network device, if you have enabled the RADIUS protocol.
A shared secret is an expected string of text, which a user must provide before the network
device authenticates a username and password. The connection is rejected until the user
supplies the shared secret.
CoA Port Used to set up the RAIUS CoA port for session directory, for user authentication. This
session directory can be launched from Monitoring and Troubleshooting Viewer page. By
default, the CoA port value is filled as 1700.