User Guide for Cisco Secure Access Control Server - Stewing Home

Network Access Profiles Pages Reference
Table 14-23 Protocols and EAP Configuration Page
Option Description
14-46
Related Topics
Protocol Configuration for NAPs, page 14-23
Authentication for profile_name Page
User Guide for Cisco Secure Access Control Server 4.2
Chapter 14 Network Access Profiles
Posture Validation Determines the EAP-FAST posture-validation mode. Select one of the following
posture-validation modes:
None—Authentication is performed; however, no posture-validation data is
requested from the client and no SPT is returned.
Required—Authentication and posture validation are performed in the same
authentication session. As a result, an SPT is returned. If this option is
selected and posture credentials that are requested from the client are not
received, authentication fails. If you are implementing NAC, this option
should be enabled.
Optional—Client may not supply posture data. Sets a default SPT when a
client cannot supply posture data to ACS.
Use Token—Select an SPT from the drop-down list to use as the default
posture token.
Posture Only—Perform posture validation without running authentication
inner methods within the authentication session. This option returns an SPT
for posture validation.
EAP-TLS Enables EAP-TLS authentication.
EAP-TLS is a certificate-based authentication protocol. EAP-TLS authentication
can occur only after you have completed the required steps on the ACS Certificate
Setup page.
Allow EAP-TLS—Check to enable EAP-TLS authentication.
EAP-MD5 Enables EAP-based Message Digest 5 hashed authentication.
Use this page to specify the databases that the profile uses for authentication rules, and to set up the
Agentless Request Processing for MAC addresses configuration.
To display this page, choose Network Access Profiles > Authentication (appears for each profile).
Table 14-24 Authentication Settings Page
Option Description
Credential Validation Databases The lists of Available Databases and Selected Databases that can validate users.
The lists of databases include the ACS Internal Database and all databases
configured in External User Databases > Unknown User Policy. If the
Unknown User Policy configures a database to fail, the database cannot become
a validation database and fails with an error message.
Populate from Global Populates the Authentication Settings from the System Configuration > Global
Authentication Setup page. Facilitates configuration of the authentication
settings.
OL-14386-02