Setting callback options for a user group – Cisco 3.3 User Manual

Page 197

Advertising
background image

6-7

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

Chapter 6 User Group Management

Basic User Group Settings

Setting Callback Options for a User Group

Callback is a command string that is passed back to the access server. You can use
callback strings to initiate a modem to call the user back on a specific number for
added security or reversal of line charges. There are three options, as follows:

No callback allowed—Disables callback for users in this group. This is the
default setting.

Dialup client specifies callback number—Allows the dialup client to
specify the callback number. The dialup client must support RFC 1570, PPP
LCP Extensions.

Use Windows Database callback settings (where possible)—Uses the
Microsoft Windows callback settings. If a Windows account for a user resides
in a remote domain, the domain in which Cisco Secure ACS resides must
have a two-way trust with that domain for the Microsoft Windows callback
settings to operate for that user.

Note

The password aging feature does not operate correctly if you also use the callback
feature. When callback is used, users cannot receive password aging messages at
login.

To set callback options for a user group, follow these steps:

Step 1

In the navigation bar, click Group Setup.

The Group Setup Select page opens.

Step 2

Select a group from the Group list, and then click Edit Settings.

The Group Settings page displays the name of the group at its top.

Step 3

In the Callback table, select one of the following three options:

No callback allowed

Dialup client specifies callback number

Use Windows Database callback settings (where possible)

Step 4

To save the group settings you have just made, click Submit.

For more information, see

Saving Changes to User Group Settings, page 6-56

.

Advertising