| The CS ACS (as it is usually known) is a software package for Windows 2000 Server or Unix (Solaris) servers. System requirements are as follows : -
Windows 2000 CS ACS 3.2 is supported on Windows 2000 Server with SP3 installed. Previous releases of CS ACS for Windows (2.5 and 2.6 for instance) were also supported on Windows 2000 Advanced Server and Datacenter Server (without Microsoft Clustering Services); those releases are now at End of Life. -
Unix CS ACS 2.3(6) is supported on an Ultra 1 or compatible workstation running Solaris 2.51, 2.6, 7, or 8. CS ACS for Unix is being discontinued in 2003. The CS ACS supports both RADIUS and TACACS+ for AAA (and it supports their simultaneous use). It is a key element of the Cisco Identity-Based Networking Services (IBNS). With release 3.2, Cisco began offering the CiscoSecure Solution Engine, a 1-Rack Unit security- hardened appliance with CS ACS installed. (Think of it the same way as you think of a PIX versus a router with a firewallremember to make your choice based on performance of the dedicated appliance versus your needs, and then compare to the advantages of a software-only solution integrated on another device.)  | Actually configuring the CS ACS is not in the list cited at the beginningremember, you might be asked about configuration for "IOS routers, PIX Firewalls, VPN Concentrators, Cisco IDS Sensors, Cisco Host IDS, and the Cisco VPN Client." However, you should understand how the supporting devices, such as the CS ACS, work, even though you might not have to know their configuration commands. |
The CS ACS runs as several modules, all of which can be started or stopped individually: -
CSAdmin Provides the HTML management interface -
CSAuth Provides the authentication service -
CSDBSynch Provides synchronization of the CS ACS database with an external RDBMS database -
CSLog Provides logging services (accounting and system activity logging) -
CSMon Provides monitoring, recording, and notification of the CS ACS's performance, and includes automatic responses in some scenarios -
CSTacacs Provides communication between TACACS+ AAA clients and the CSAuth service -
CSRadius Provides communication between RADIUS AAA clients and the CSAuth service |
