Cisco Access Control Server (ACS)

Control Server (ACS), interoperating with security features in Cisco IOS Software. The delegate will gain a thorough understanding of the operation of the Cisco Secure ACS to control access to network services and devices. Course subjects include the principles of authentication, to restrict user access to networks, services, and devices; authorisation, to restrict the functions users can perform on services and devices; and accounting, to track the activities of users. The RADIUS, TACACS+, Extensible Authentication Protocol (EAP), and 802.1x protocols are discussed in theory and practice as the basis of network security. The course includes hands-on labs to provide personal experience in configuring Cisco ACS and Cisco network devices.

Course Objectives

• Familiarize yourself with the various security products that require centralisation
• Describe the components, features, and functionality of the Cisco Access Control Server
• Describe and install Cisco ACS on a Windows platform including database replication and recoverymechanisms
• Describe and configure AAA services included in Cisco IOS to enable interaction with Cisco ACS
• Identify and use TACACS+ and RADIUS protocols
• Describe 802.1x services to authenticate end user including the use of EAP, LEAP and PEAP
• Configure and troubleshoot ACS deployments

Prerequisites

• Understanding of TCP/IP networking
• Basic understanding of Cisco router and switch configuration
• Basic understanding of security challenges facing networks
• Internet Web browser use
• Windows system administration knowledge
• Cisco CCNA or attendance of ICND

Who should attend

• Network Administrators
• Network Operators
• System Administrators

Course outline

• Module 1: The Cisco Security Portfolio- Secure Network Access with Cisco IOS products and ASA/PIX Firewall
• Module 2: Deploying ACS in a Windows Environment- Install and Administer ACS. Manage database replication and upgrades
• Module 3: AAA Services- Using the ACS server to Authenticate, Authorise and Account network devices. Configure and troubleshoot TACACS+ and RADIUS services used by ACS and its AAA clients
• Module 4: Configure ACS- Configuring ACS to enable secure access to network devices
• Module 5: Identity-Based Network Services- Validating end users with 802.1x, Using 802.1x with EAP, LEAP and PEAP services, Using downloadable access lists

.