cisco ACS 5.1產(chǎn)品介紹

1、 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID1Cisco Secure ACS 5.1產(chǎn)品介紹 馬旻馬旻 系統(tǒng)工程師系統(tǒng)工程師思科戰(zhàn)略客戶部思科戰(zhàn)略客戶部20092009年年1212月月1111日日 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID2Hardware/Software Platform ACS implements identity management an

2、d AAA services CD-ROM version for VMware ESX server Appliance version delivered on hardened Linux OS Highly scalable (100,000+ users, thousands of RADIUS/TACACS+ devices) and feature-rich 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID3ACS Appliance的優(yōu)點(diǎn)的優(yōu)點(diǎn) Security: The

3、 need to create a turnkey security-hardened service focused on exclusively running the Cisco Secure ACS service. The appliance provides an ability to remove all extraneous services, block all unused ports, and otherwise prevent all other access to the Cisco Secure ACS system-all of which serve to dr

4、amatically increase its security posture. Manageability: The Cisco Secure ACS Solution Engine is a dedicated, exclusive service for AAA with no ability to install or run other services or applications. This greatly improves the support and day-to-day management of the Cisco Secure ACS system. Reliab

5、ility: By targeting only the OS services required by Cisco Secure ACS, the Solution Engine appliance offers greater operational reliability and security of the Cisco Secure ACS system. SNMP Support: The Cisco Secure ACS Solution Engine supports Simple Network Management Protocol (SNMP) v1 and v2c (r

6、ead only), so that external systems can monitor the appliance. SNMP support includes support for MIB-II and HOST-RESOURCES-MIB. Plug and Play: The Cisco Secure ACS Solution Engine is shipped pre-installed with Cisco Secure ACS application software, greatly reducing the time it takes to setup and dep

7、loy a Cisco Secure ACS solution into your network. 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID4ACS Appliance 5.1配置說明配置說明產(chǎn)品名稱產(chǎn)品描述數(shù)量單價(jià)CSACS-1121-K9ACS 1121 Appliance With 5.1 SW And Base license1$31,490 CAB-ACAAC Power Cord (China/Australia), C13, AS 3112, 2.5m1$0 CS

8、ACS-5-ADV-LICACS 5 TrustSec Access Control Add-on License1$21,000 CSACS-5-LRG-LICACS 5 Large Deployment Add-on License1$21,000 CSACS-5-BASE-LICCisco Secure ACS 5 Base License1$0 CSACS-5.1-SW-K9Config Option: ACS 5.1 Software Loaded On 11211$0 總計(jì)$73,490 Licenses類型解釋：CSACS-5-ADV-LIC 主要用于6500交換機(jī)和Nexus7

9、K交換機(jī)使能TrustSec 特性Cisco Catalyst 6500 running Cisco IOS 12.2(33) SXI and Nexus 7000 NX-OS 4.0.3 devices support TrustSecCSACS-5-LRG-LIC 主要用于支持超過500個(gè)網(wǎng)絡(luò)設(shè)備的環(huán)境Base license 主要用于支持小于500個(gè)網(wǎng)絡(luò)設(shè)備的環(huán)境 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID5Cisco 1121 Secure Access Control S

10、ystem 設(shè)備介紹 high x wide x deep (44.5 mm x 440.0 mm x 559.0 mm). 重量 11.0 kg 到 12.7 kg 之間 CPU ：Intel Core 2 Duo 2.4-GHz processor with an 800-MHz front side bus (FSB) and 2 MB of Layer 2 cache. Four synchronous dynamic RAM (SDRAM) slots that are installed with 4 GB. Two 250-GB SATA hard drives installe

11、d. A fixed RJ-45 10BASE-T/100BASE-TX/1000BASE-T network interface connector (located on the rear panel). One DVD-ROM drive (located on the front panel). 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID6 ACS5.1只能安裝在VMware ESX 3.5 或 ESX 4.0 上ACS 5.1 軟件配置說明軟件配置說明產(chǎn)品名稱產(chǎn)品描述數(shù)量

12、單價(jià)CSACS-5.1-VM-K9ACS 5.1 VMWare Software And Base License1$25,190 CSACS-5-ADV-LICACS 5 TrustSec Access Control Add-on License1$21,000 CSACS-5-LRG-LICACS 5 Large Deployment Add-on License1$21,000 CSACS-5-BASE-LICCisco Secure ACS 5 Base License1$0 總價(jià)$67,190 硬件要求最低指標(biāo)CPU Intel Core2; 2.13 GHz Memory 4 G

13、B RAM Hard Disks 500 GB of disk storage NIC 1 GB NIC interface ESX ESX 3.5 Server installed 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID7Features Unique to the ACS Appliance Security-hardened underlying OS. Port-based packet filtering, allowing connections only to t

14、he ports necessary for Cisco Secure ACS operation. Serial console interface for initial configuration, subsequent management of IP connections, Web interface, and application of upgrades and remote reboots. The serial console interface supports both serial line and Telnet connections. SNMP read-only

15、 support to monitor the appliance from external systems. Backup/restore of the Cisco Secure ACS data via FTP. Recovery procedures. Network Timing Protocol (NTP) support for maintaining network time consistency with other appliances or network devices. 2006 Cisco Systems, Inc. All rights reserved.Cis

16、co ConfidentialPresentation_ID8ACS 5.1新增特性新增特性 TACACS+ Enhancements Identity Store Enhancements Support for Additional Protocols Administrator Access Feature Enhancements Policy Condition Enhancements Monitoring and Troubleshooting Enhancements Other Feature Enhancements 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID9最基本部署方式最基本部署方式 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID10 負(fù)載分擔(dān)部署模式 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID11大規(guī)模部署方式大規(guī)模部署方式 2006 Cisco Systems, I