Cisco 3.3 - Manual (Page 667)

B-1
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
A P P E N D I X
B
TACACS+ Attribute-Value Pairs
Cisco Secure Access Control Server (ACS) for Windows Server supports
Terminal Access Controller Access Control System (TACACS+) attribute-value
(AV) pairs. You can enable different AV pairs for any supported attribute value.
Cisco IOS AV Pair Dictionary
Before selecting TACACS+ AV pairs for Cisco Secure ACS, confirm that your
AAA client is running Cisco IOS Release 11.2 or later. Earlier versions of Cisco
IOS work with Cisco Secure ACS but do not fully support the TACACS+ features
in Cisco Secure ACS.
Note If you specify a given AV pair in Cisco Secure ACS, you must also enable the
corresponding AV pair in the Cisco IOS software running on the AAA client.
Therefore, you must consider which AV pairs your Cisco IOS release supports. If
Cisco Secure ACS sends an AV pair to the AAA client that the Cisco IOS software
does not support, that attribute is not implemented.
For more information on TACACS+ AV pairs, refer to Cisco IOS documentation
for the release of Cisco IOS running on your AAA clients.
Note All TACACS+ values are strings. The concept of value “type” does not exist in
TACACS+ as it does in Remote Access Dial-In User Service (RADIUS).