CSACS for Windows NT2000

CSACS for Windows NT/2000

CSACS runs on the Windows operating system or the Unix Solaris operating system. In the opinion of the authors, Cisco is devoting its efforts to enhancing the Windows version of CSACS and not the Unix version. Therefore, we discuss CSACS for Windows in this text.

Cisco tests on CSACS version 3.0.1, although this version is several versions old. Version 3.0.1 added several major features to CSACS to provide important functionalities.

You can download a 90-day evaluation copy of CSACS that provides complete functionality. Visit http://www.cisco.com/pcgi-bin/tablebuild.pl/cs-acs-win to retrieve the CSACS software.

CSACS v3.0.1 added the following major features:

• 802.1x support

• Microsoft Challenge Handshake Authentication Protocol (MS-CHAP) version 2 support

• MS-CHAP password-aging support

• Command authorization sets

• Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) and EAP-Message Digest 5 (MD5) support

In addition to the major features that Cisco added to CSACS, it added several minor features:

• Per- user access control lists (ACLs)

• Shared network access restrictions (NARs)

• Multiple devices per AAA client configuration

• Wildcards in NARs

• User-defined RADIUS vendor-specific attributes (VSAs)

• Multiple Lightweight Directory Access Protocol (LDAP) lookups and LDAP failover