11-59
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 11 Working with User Databases
Token Server User Databases
use the CHAP password specified during the first login to further lessen the
chance of a security problem. When the first B channel is dropped, the cached
token is erased.
RADIUS-Enabled Token Servers
This section describes Cisco Secure ACS support for token servers that provide a
standard RADIUS interface.
About RADIUS-Enabled Token Servers
Cisco Secure ACS can support token servers using the RADIUS server built into
the token server. Rather than using the proprietary API of the vendor,
Cisco Secure ACS sends standard RADIUS authentication requests to the
RADIUS authentication port on the token server. The token servers supported
through their RADIUS servers are as follows:
• ActivCard
• CRYPTOCard
• Vasco
• SafeWord
• PassGo
Note PassGo was formerly known as AXENT.
• Any IETF RFC 2865-compliant token server
You can create multiple instances of each of these token server types in
Cisco Secure ACS. For information about configuring Cisco Secure ACS to
authenticate users with one of these token servers, see Configuring a RADIUS
Token Server External User Database, page 11-60.
Cisco Secure ACS provides a means for specifying a user group assignment in the
RADIUS response from the RADIUS-enabled token server. Group specification
always takes precedence over group mapping. For more information, see
RADIUS-Based Group Specification, page 12-22.
To Next Page
Loading...
Need help?
General