Chapter 6 Setting Up and Managing User Groups
Common User Group Settings
6-6
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Step 5
To save the group settings you have just made, click Submit.
For more information, see
Saving Changes to User Group Settings, page 6-53
.
Step 6
To continue specifying other group settings, perform other procedures in this
chapter, as applicable.
Setting Callback Options for a User Group
Callback is a command string that is passed back to the access server. You can use
callback strings to initiate a modem to call the user back on a specific number for
added security or reversal of line charges. There are three options, as follows:
•
No callback allowed—Disables callback for users in this group. This is the
default setting.
•
Dialup client specifies callback number—Allows the dialup client to
specify the callback number. The dialup client must support RFC 1570, PPP
LCP Extensions.
•
Use Microsoft NT/2000 Callback settings (where possible)—Uses the
Microsoft Windows NT/2000 callback settings. If a Windows account for a
user resides in a remote domain, the domain in which Cisco Secure ACS
resides must have a two-way trust with that domain for the
Microsoft NT/2000 callback settings to operate for that user.
To set callback options for a user group, follow these steps:
Step 1
In the navigation bar, click Group Setup.
Result: The Group Setup Select page opens.
Step 2
Select a group from the Group list, and then click Edit Settings.
Result: The Group Settings page displays the name of the group at its top.
Step 3
In the Callback table, select one of the following three options:
•
No callback allowed
•
Dialup client specifies callback number
•
Use Microsoft NT/2000 Callback settings (where possible)