Cisco 3.3 User Manual

Page 232

Advertising
background image

Chapter 6 User Group Management

Configuration-specific User Group Settings

6-42

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

The Cisco-Aironet-Session-Timeout VSA appears on the Group Setup page only
when both the following are true:

A AAA client has been configured to use RADIUS (Cisco Aironet) in
Network Configuration.

The group-level RADIUS (Cisco Aironet) attribute has been enabled in
Interface Configuration: RADIUS (Cisco Aironet).

Note

To hide or display the Cisco Aironet RADIUS VSA, see

Setting Protocol

Configuration Options for Non-IETF RADIUS Attributes, page 3-17

. A VSA

applied as an authorization to a particular group persists, even when you remove
or replace the associated AAA client; however, if you have no AAA clients
configured to use RADIUS (Cisco Aironet), the VSA settings do not appear in the
group configuration interface.

To configure and enable the Cisco Aironet RADIUS attribute to be applied as an
authorization for each user in the current group, follow these steps:

Step 1

Confirm that your IETF RADIUS attributes are configured properly. For more
information about setting IETF RADIUS attributes, see

Configuring IETF

RADIUS Settings for a User Group, page 6-38

.

Step 2

In the navigation bar, click Group Setup.

The Group Setup Select page opens.

Step 3

From the Group list, select a group, and then click Edit Settings.

The Group Settings page displays the name of the group at its top.

Step 4

From the Jump To list at the top of the page, choose RADIUS (Cisco Aironet).

Step 5

In the Cisco Aironet RADIUS Attributes table, select the [5842\001]
Cisco-Aironet-Session-Timeout
check box.

Step 6

In the [5842\001] Cisco-Aironet-Session-Timeout box, type the session timeout
value (in seconds) that Cisco Secure ACS is to send in the IETF RADIUS
Session-Timeout (27) attribute when the AAA client is configured in Network
Configuration to use the RADIUS (Cisco Aironet) authentication option. The
recommended value is 600 seconds.

For more information about the IETF RADIUS Session-Timeout attribute, see

Appendix C, “RADIUS Attributes”

, or your AAA client documentation.

Advertising