Cisco 3.3 User Manual

Page 233

Advertising
background image

6-43

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

Chapter 6 User Group Management

Configuration-specific User Group Settings

Step 7

To save the group settings you have just made, click Submit.

For more information, see

Saving Changes to User Group Settings, page 6-56

.

Step 8

To continue specifying other group settings, perform other procedures in this
chapter, as applicable.

Configuring Ascend RADIUS Settings for a User Group

The Ascend RADIUS parameters appear only when both the following are true:

A AAA client has been configured to use RADIUS (Ascend) or RADIUS
(Cisco IOS/PIX) in Network Configuration.

Group-level RADIUS (Ascend) attributes have been enabled in Interface
Configuration: RADIUS (Ascend).

Ascend RADIUS represents only the Ascend proprietary attributes. You must
configure both the IETF RADIUS and Ascend RADIUS attributes. Proprietary
attributes override IETF attributes.

The default attribute setting displayed for RADIUS is

Ascend-Remote-Addr

.

Note

To hide or display Ascend RADIUS attributes, see

Setting Protocol Configuration

Options for Non-IETF RADIUS Attributes, page 3-17

. A VSA applied as an

authorization to a particular group persists, even when you remove or replace the
associated AAA client; however, if you have no AAA clients of this (vendor) type
configured, the VSA settings do not appear in the group configuration interface.

To configure and enable Ascend RADIUS attributes to be applied as an
authorization for each user in the current group, follow these steps:

Step 1

Confirm that your IETF RADIUS attributes are configured properly. For more
information about setting IETF RADIUS attributes, see

Configuring IETF

RADIUS Settings for a User Group, page 6-38

.

Step 2

In the navigation bar, click Group Setup.

The Group Setup Select page opens.

Advertising