User Guide for Cisco Secure Access Control Server - Stewing Home

Chapter 12 User Databases
OL-14386-02
LEAP Proxy RADIUS Server Database (Both Platforms)
Configuring a LEAP Proxy RADIUS Server External User Database
You should install and configure your proxy RADIUS server before configuring ACS to authenticate
users with it. For information about installing the proxy RADIUS server, refer to the documentation that
is included with your RADIUS server.
To configure LEAP proxy RADIUS authentication:
Step 1 In the navigation bar, click External User Databases.
Step 2 Click Database Configuration.
ACS lists all possible external user database types.
Step 3 Click LEAP Proxy RADIUS Server.
If no LEAP Proxy RADIUS Server configuration exists, only the Database Configuration Creation table
appears. Otherwise, in addition to the Database Configuration Creation table, the External User
Database Configuration table appears.
Step 4 If you are creating a configuration:
a. Click Create New Configuration.
b. Type a name for the new configuration for the LEAP Proxy RADIUS Server in the box provided, or
accept the default name in the box.
c. Click Submit.
ACS lists the new configuration in the External User Database Configuration table.
Step 5 Under External User Database Configuration, select the name of the LEAP Proxy RADIUS Server
database that you configure.
Note If only one LEAP Proxy RADIUS Server configuration exists, the name of that configuration
appears instead of the list. Proceed to Step 6.
Step 6 Click Configure.
Step 7 In the following boxes, type the required information:
Primary Server Name/IP—IP address of the primary proxy RADIUS server.
Secondary Server Name/IP—IP address of the secondary proxy RADIUS server.
Shared Secret—The shared secret of the proxy RADIUS server. This must be identical to the shared
secret with which the proxy RADIUS server is configured.
Authentication Port—The UDP port over which the proxy RADIUS server conducts authentication
sessions. If the LEAP Proxy RADIUS server is installed on the same Windows server as ACS, this
port should not be the same port that ACS uses for RADIUS authentication. For more information
about the ports that ACS uses for RADIUS, see RADIUS, page 1-4.
Timeout (seconds):—The number of seconds that ACS waits before sending notification to the user
that the authentication attempt has timed out.
Retries—The number of authentication attempts ACS makes before failing over to the secondary
proxy RADIUS server.
Failback Retry Delay (minutes)—The number of minutes after which ACS attempts
authentications by using a failed primary proxy RADIUS server.
User Guide for Cisco Secure Access Control Server 4.2
12-49