Tacacs+ av pairs – Cisco 3.3 User Manual

Page 668

Advertising
background image

Appendix B TACACS+ Attribute-Value Pairs

Cisco IOS AV Pair Dictionary

B-2

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

TACACS+ AV Pairs

Note

Beginning with Cisco Secure ACS 2.3, some TACACS+ attributes no longer
appear on the Group Setup page. This is because IP pools and callback supersede
the following attributes:

addr
addr-pool
callback-dialstring

Additionally, these attributes cannot be set via database synchronization, and
ip:addr=n.n.n.n is not allowed as a Cisco vendor-specific attribute (VSA).

Cisco Secure ACS supports many TACACS+ AV pairs. For descriptions of these
attributes, refer to Cisco IOS documentation for the release of Cisco IOS running
on your AAA clients. TACACS+ AV pairs supported in Cisco Secure ACS are as
follows:

acl=

addr=

addr-pool=

autocmd=

callback-dialstring

callback-line

callback-rotary

cmd-arg=

cmd=

dns-servers=

gw-password

idletime=

inacl#n

inacl=

interface-config=

Advertising