06-27-2012 12:48 AM - edited 03-10-2019 07:14 PM
Hi Security Experts,
I have a requirement to add a third-party box (niksun appliance used for sniffing packets) as a radius client in ACS 4.2.
I have gone through the configuration guide of niksun to see how it should be done.
As per their documentation, I have to create a file on the ACS server ( our ACS is installed in a windows 2003 server) and this file should include Niksun Vendor ID. Then I have to include this file in ACS dictionary file.
Could you give me an example of how this is done on ACS 4.2? FYI our ACS is installed in a windows 2003 server.
PS : I rate useful posts.
Thanks,
Kashish
Solved! Go to Solution.
06-27-2012 06:03 AM
Well Well
You are talking about defining custom radius vendor on ACS.
This can be done using RDBMS synchronization feature , by having account actions.csv file built based on the dictionary defintion of the third party vendor and importing it back to ACS.
Check the following link for further info:
the following actiond codes should be the core for achieving your task:
350 ADD_UDV
352 ADD_VSA
353 SET_VSA_PROFILE
354 ADD_VSA_ENUM
355 ADOPT_NEW_UDV_OR_VSA
-------------------------------------------------------------------
Make sure to rate correct answer
06-27-2012 04:19 AM
Can some security expert help me out here?
06-27-2012 06:03 AM
Well Well
You are talking about defining custom radius vendor on ACS.
This can be done using RDBMS synchronization feature , by having account actions.csv file built based on the dictionary defintion of the third party vendor and importing it back to ACS.
Check the following link for further info:
the following actiond codes should be the core for achieving your task:
350 ADD_UDV
352 ADD_VSA
353 SET_VSA_PROFILE
354 ADD_VSA_ENUM
355 ADOPT_NEW_UDV_OR_VSA
-------------------------------------------------------------------
Make sure to rate correct answer
07-05-2012 07:50 PM
Thanks maldehne.
On further reading, I found that same thing can be done using csutil. I used csutil and was able to add custom radius vendor. But I am sure RDBMS would also have worked.
Thanks,
Kashish
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: