Setting usage quotas for a user group, Setting usage quotas for a user – Cisco 3.3 User Manual

Page 204

Advertising
background image

Chapter 6 User Group Management

Basic User Group Settings

6-14

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

Step 6

To continue specifying other group settings, perform other procedures in this
chapter, as applicable.

Setting Usage Quotas for a User Group

Note

If this feature does not appear, click Interface Configuration, click Advanced
Options
, and then select the Usage Quotas check box.

Perform this procedure to define usage quotas for members of a group. Session
quotas affect each user of a group individually, not the group collectively. You can
set quotas for a given period in two ways:

By total duration of session

By the total number of sessions

If you make no selections in the Usage Quotas section for a group, no usage
quotas are enforced on users assigned to that group, unless you configure usage
quotas for the individual users.

Note

The Usage Quotas section on the Group Settings page does not show usage
statistics.
Usage statistics are available only on the settings page for an individual user. For
more information, see

Setting User Usage Quotas Options, page 7-18

.

When a user exceeds his or her assigned quota, Cisco Secure ACS denies that user
access upon attempting to start a session. If a quota is exceeded during a session,
Cisco Secure ACS allows the session to continue.

You can reset the usage quota counters for all users of a group from the Group
Settings page. For more information about resetting usage quota counters for a
whole group, see

Resetting Usage Quota Counters for a User Group, page 6-55

.

Tip

To support time-based quotas, we recommend enabling accounting update packets
on all AAA clients. If update packets are not enabled, the quota is updated when
the user logs off. If the AAA client through which the user is accessing your

Advertising