资源描述
2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID1Cisco Secure ACS 5.1产品介绍 马旻马旻 系统工程师系统工程师思科战略客户部思科战略客户部20092009年年1212月月1111日日 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID2Hardware/Software Platform ACS implements identity management and AAA services CD-ROM version for VMware ESX server Appliance version delivered on hardened Linux OS Highly scalable(100,000+users,thousands of RADIUS/TACACS+devices)and feature-rich 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID3ACS Appliance的优点的优点 Security:The need to create a turnkey security-hardened service focused on exclusively running the Cisco Secure ACS service.The appliance provides an ability to remove all extraneous services,block all unused ports,and otherwise prevent all other access to the Cisco Secure ACS system-all of which serve to dramatically increase its security posture.Manageability:The Cisco Secure ACS Solution Engine is a dedicated,exclusive service for AAA with no ability to install or run other services or applications.This greatly improves the support and day-to-day management of the Cisco Secure ACS system.Reliability:By targeting only the OS services required by Cisco Secure ACS,the Solution Engine appliance offers greater operational reliability and security of the Cisco Secure ACS system.SNMP Support:The Cisco Secure ACS Solution Engine supports Simple Network Management Protocol(SNMP)v1 and v2c(read only),so that external systems can monitor the appliance.SNMP support includes support for MIB-II and HOST-RESOURCES-MIB.Plug and Play:The Cisco Secure ACS Solution Engine is shipped pre-installed with Cisco Secure ACS application software,greatly reducing the time it takes to setup and deploy a Cisco Secure ACS solution into your network.2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID4ACS Appliance 5.1配置说明配置说明产品名称产品描述数量单价CSACS-1121-K9ACS 1121 Appliance With 5.1 SW And Base license1$31,490 CAB-ACAAC Power Cord(China/Australia),C13,AS 3112,2.5m1$0 CSACS-5-ADV-LICACS 5 TrustSec Access Control Add-on License1$21,000 CSACS-5-LRG-LICACS 5 Large Deployment Add-on License1$21,000 CSACS-5-BASE-LICCisco Secure ACS 5 Base License1$0 CSACS-5.1-SW-K9Config Option:ACS 5.1 Software Loaded On 11211$0 总计$73,490 Licenses类型解释：CSACS-5-ADV-LIC 主要用于6500交换机和Nexus7K交换机使能TrustSec 特性Cisco Catalyst 6500 running Cisco IOS 12.2(33)SXI and Nexus 7000 NX-OS 4.0.3 devices support TrustSecCSACS-5-LRG-LIC 主要用于支持超过500个网络设备的环境Base license 主要用于支持小于500个网络设备的环境 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID5Cisco 1121 Secure Access Control System 设备介绍 high x wide x deep(44.5 mm x 440.0 mm x 559.0 mm).重量 11.0 kg 到 12.7 kg 之间 CPU：Intel Core 2 Duo 2.4-GHz processor with an 800-MHz front side bus(FSB)and 2 MB of Layer 2 cache.Four synchronous dynamic RAM(SDRAM)slots that are installed with 4 GB.Two 250-GB SATA hard drives installed.A fixed RJ-45 10BASE-T/100BASE-TX/1000BASE-T network interface connector(located on the rear panel).One DVD-ROM drive(located on the front panel).2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID6 ACS5.1只能安装在VMware ESX 3.5 或 ESX 4.0 上ACS 5.1 软件配置说明软件配置说明产品名称产品描述数量单价CSACS-5.1-VM-K9ACS 5.1 VMWare Software And Base License1$25,190 CSACS-5-ADV-LICACS 5 TrustSec Access Control Add-on License1$21,000 CSACS-5-LRG-LICACS 5 Large Deployment Add-on License1$21,000 CSACS-5-BASE-LICCisco Secure ACS 5 Base License1$0 总价$67,190 硬件要求最低指标CPU Intel Core2;2.13 GHz Memory 4 GB RAM Hard Disks 500 GB of disk storage NIC 1 GB NIC interface ESX ESX 3.5 Server installed 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID7Features Unique to the ACS Appliance Security-hardened underlying OS.Port-based packet filtering,allowing connections only to the ports necessary for Cisco Secure ACS operation.Serial console interface for initial configuration,subsequent management of IP connections,Web interface,and application of upgrades and remote reboots.The serial console interface supports both serial line and Telnet connections.SNMP read-only support to monitor the appliance from external systems.Backup/restore of the Cisco Secure ACS data via FTP.Recovery procedures.Network Timing Protocol(NTP)support for maintaining network time consistency with other appliances or network devices.2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID8ACS 5.1新增特性新增特性 TACACS+Enhancements Identity Store Enhancements Support for Additional Protocols Administrator Access Feature Enhancements Policy Condition Enhancements Monitoring and Troubleshooting Enhancements Other Feature Enhancements 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID9最基本部署方式最基本部署方式 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID10 负载分担部署模式 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID11大规模部署方式大规模部署方式 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID12多站点分布部署多站点分布部署 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID13计算需要计算需要ACS服务器数量的经验公式服务器数量的经验公式 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID14
展开阅读全文