acs server and single connection

t.waibel · ‎06-25-2008

Hello,

if we use the single-connection feature at the router configuration do we need to select the single connect option at the AAA Client setup:

Single Connect TACACS+ AAA Client (Record stop in accounting on failure)

Select this option to enable a single-connect TACACS+ AAA client. This allows all TACACS+ sessions between the AAA client and ACS to occur over a single TCP session rather than separate sessions for each request. If this feature is selected and the connection fails, a stop record is sent to the TACACS+ accounting log for each user connected through the AAA client.

or is this just only for sending the stop record?

best regards

Torsten Waibel

smahbub · ‎07-01-2008

Single Connect TACACS+ AAA Client (Record stop in accounting on failure)-If you select TACACS+ (Cisco IOS) from the Authenticate Using list, you can use this option to specify that ACS use a single TCP connection for all TACACS+ communication with the AAA client, rather than a new one for every TACACS+ request. In single connection mode, multiple requests from a network device are multiplexed over a single TCP session. By default, this check box is unchecked.

Refer the following url for more info:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/NetCfg.html#wp342112