《ciscoACS5.1产品介绍.ppt》由会员分享，可在线阅读，更多相关《ciscoACS5.1产品介绍.ppt（14页珍藏版）》请在三一文库上搜索。
1、Cisco Secure ACS 5.1 产品介绍,马旻 系统工程师 思科战略客户部 2009年12月11日,Hardware/Software Platform,ACS implements identity management and AAA services CD-ROM version for VMware ESX server Appliance version delivered on hardened Linux OS Highly scalable (100,000+ users, thousands of RADIUS/TACACS+ devices) and featur
2、e-rich,ACS Appliance的优点,Security: The need to create a turnkey security-hardened service focused on exclusively running the Cisco Secure ACS service. The appliance provides an ability to remove all extraneous services, block all unused ports, and otherwise prevent all other access to the Cisco Secur
3、e ACS system-all of which serve to dramatically increase its security posture. Manageability: The Cisco Secure ACS Solution Engine is a dedicated, exclusive service for AAA with no ability to install or run other services or applications. This greatly improves the support and day-to-day management o
4、f the Cisco Secure ACS system. Reliability: By targeting only the OS services required by Cisco Secure ACS, the Solution Engine appliance offers greater operational reliability and security of the Cisco Secure ACS system. SNMP Support: The Cisco Secure ACS Solution Engine supports Simple Network Man
5、agement Protocol (SNMP) v1 and v2c (read only), so that external systems can monitor the appliance. SNMP support includes support for MIB-II and HOST-RESOURCES-MIB. Plug and Play: The Cisco Secure ACS Solution Engine is shipped pre-installed with Cisco Secure ACS application software, greatly reduci
6、ng the time it takes to setup and deploy a Cisco Secure ACS solution into your network.,ACS Appliance 5.1配置说明,Licenses类型解释： CSACS-5-ADV-LIC 主要用于6500交换机和Nexus7K交换机使能TrustSec 特性 Cisco Catalyst 6500 running Cisco IOS 12.2(33) SXI and Nexus 7000 NX-OS 4.0.3 devices support TrustSec CSACS-5-LRG-LIC 主要用于支
7、持超过500个网络设备的环境 Base license 主要用于支持小于500个网络设备的环境,Cisco 1121 Secure Access Control System 设备介绍,high x wide x deep (44.5 mm x 440.0 mm x 559.0 mm). 重量 11.0 kg 到 12.7 kg 之间 CPU ：Intel Core 2 Duo 2.4-GHz processor with an 800-MHz front side bus (FSB) and 2 MB of Layer 2 cache. Four synchronous dynamic RA
8、M (SDRAM) slots that are installed with 4 GB. Two 250-GB SATA hard drives installed. A fixed RJ-45 10BASE-T/100BASE-TX/1000BASE-T network interface connector (located on the rear panel). One DVD-ROM drive (located on the front panel).,ACS5.1只能安装在VMware ESX 3.5 或 ESX 4.0 上,ACS 5.1 软件配置说明,Features Uni
9、que to the ACS Appliance,Security-hardened underlying OS. Port-based packet filtering, allowing connections only to the ports necessary for Cisco Secure ACS operation. Serial console interface for initial configuration, subsequent management of IP connections, Web interface, and application of upgra
10、des and remote reboots. The serial console interface supports both serial line and Telnet connections. SNMP read-only support to monitor the appliance from external systems. Backup/restore of the Cisco Secure ACS data via FTP. Recovery procedures. Network Timing Protocol (NTP) support for maintainin
11、g network time consistency with other appliances or network devices.,ACS 5.1新增特性,TACACS+ Enhancements Identity Store Enhancements Support for Additional Protocols Administrator Access Feature Enhancements Policy Condition Enhancements Monitoring and Troubleshooting Enhancements Other Feature Enhancements,最基本部署方式,负载分担部署模式,大规模部署方式,多站点分布部署,计算需要ACS服务器数量的经验公式,