Cisco ASA Series User Manual

1-14
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Network Admission Control
Changing Global NAC Framework Settings
Enabling and Disabling Clientless Authentication
Clientless authentication is enabled by default. The default configuration contains the eou allow
clientless configuration.
Restrictions
The eou commands apply only to NAC Framework sessions.
Detailed Steps
Follow these steps to enable clientless authentication for a NAC Framework configuration:
Changing the Login Credentials Used for Clientless Authentication
When clientless authentication is enabled, and the ASA fails to receive a response to a validation request
from the remote host, it sends a clientless authentication request on behalf of the remote host to the
Access Control Server. The request includes the login credentials that match those configured for
clientless authentication on the Access Control Server. The default username and password for clientless
authentication on the ASA matches the default username and password on the Access Control Server;
the default username and password are both “clientless.”
Prerequisites
If you change these values on the Access Control Server, you must also do so on the ASA.
Detailed Steps
Enter the following to change the username used for clientless authentication:
Command Purpose
Step 1
global
Switches to global configuration mode.
Step 2
eou allow {audit | clientless | none}
Example:
hostname(config)# eou allow audit
hostname(config)#
Enables clientless authentication for a NAC
framework configuration.
• audit uses an audit server to perform clientless
authentication.
• clientless uses a Cisco Access Control Server to
perform clientless authentication.
• none disables clientless authentication.
Shows how to configure the ASA to use an audit
server to perform clientless authentication.
Step 3
[no] eou allow {audit | clientless | none}
Example:
hostname(config)# no eou allow audit
hostname(config)#
Removes the command from the configuration.
Disables the use of an audit server.

Cisco ASA Series Specifications

General

Brand	Cisco
Model	ASA Series
Category	Network Hardware
Language	English