ciscoACS5.1产品介绍.ppt

1、Cisco Secure ACS 5.1产品介绍,马旻 系统工程师 思科战略客户部 2009年12月11日,Hardware/Software Platform,ACS implements identity management and AAA services CD-ROM version for VMware ESX server Appliance version delivered on hardened Linux OS Highly scalable (100,000+ users, thousands of RADIUS/TACACS+ devices) and feature

2、-rich,ACS Appliance的优点,Security: The need to create a turnkey security-hardened service focused on exclusively running the Cisco Secure ACS service. The appliance provides an ability to remove all extraneous services, block all unused ports, and otherwise prevent all other access to the Cisco Secure

3、 ACS system-all of which serve to dramatically increase its security posture. Manageability: The Cisco Secure ACS Solution Engine is a dedicated, exclusive service for AAA with no ability to install or run other services or applications. This greatly improves the support and day-to-day management of

4、 the Cisco Secure ACS system. Reliability: By targeting only the OS services required by Cisco Secure ACS, the Solution Engine appliance offers greater operational reliability and security of the Cisco Secure ACS system. SNMP Support: The Cisco Secure ACS Solution Engine supports Simple Network Mana

5、gement Protocol (SNMP) v1 and v2c (read only), so that external systems can monitor the appliance. SNMP support includes support for MIB-II and HOST-RESOURCES-MIB. Plug and Play: The Cisco Secure ACS Solution Engine is shipped pre-installed with Cisco Secure ACS application software, greatly reducin

6、g thetime it takes to setup and deploy a Cisco Secure ACS solution into your network.,ACS Appliance 5.1配置说明,Licenses类型解释： CSACS-5-ADV-LIC 主要用于6500交换机和Nexus7K交换机使能TrustSec 特性 Cisco Catalyst 6500 running Cisco IOS 12.2(33) SXI and Nexus 7000 NX-OS 4.0.3 devices support TrustSec CSACS-5-LRG-LIC 主要用于支持超

7、过500个网络设备的环境 Base license 主要用于支持小于500个网络设备的环境,Cisco 1121 Secure Access Control System 设备介绍,high x wide x deep (44.5mm x 440.0mm x 559.0mm). 重量 11.0 kg 到 12.7 kg 之间 CPU ：Intel Core 2 Duo 2.4-GHz processor with an 800-MHz front side bus (FSB) and 2 MB of Layer 2 cache. Four synchronous dynamic RAM (SD

8、RAM) slots that are installed with 4 GB. Two 250-GB SATA hard drives installed. A fixed RJ-45 10BASE-T/100BASE-TX/1000BASE-T network interface connector (located on the rear panel). One DVD-ROM drive (located on the front panel).,ACS5.1只能安装在VMware ESX 3.5 或 ESX 4.0 上,ACS 5.1 软件配置说明,Features Unique t

9、o the ACS Appliance,Security-hardened underlying OS. Port-based packet filtering, allowing connections only to the ports necessary for Cisco Secure ACS operation. Serial console interface for initial configuration, subsequent management of IP connections, Web interface, and application of upgrades a

10、nd remote reboots. The serial console interface supports both serial line and Telnet connections. SNMP read-only support to monitor the appliance from external systems. Backup/restore of the Cisco Secure ACS data via FTP. Recovery procedures. Network Timing Protocol (NTP) support for maintaining network time consistency with other appliances or network devices.,ACS 5.1新增特性,TACACS+ Enhancements Identity Store Enhancements Support for Additional Protocols Administrator Access Featur