Chapter 7 Setting Up and Managing User Accounts
Basic User Setup Options
7-4
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Basic User Setup Options
This section presents the basic activities you perform when configuring a new
user. At its most basic level, configuring a new user requires only three steps, as
follows:
•
Specify a name.
•
Specify either a method for remote password authentication or, for
authentication via the CiscoSecure user database, a password.
•
Submit the information.
For detailed procedural information, see
Adding a Basic User Account, page 7-5
.
What other procedures you perform when setting up new user accounts is a
function both of the complexity of your network and of the granularity of control
you desire. The other basic procedures detailed in this section include the
following:
•
Setting Supplementary User Information, page 7-7
•
Setting a Separate CHAP/MS-CHAP/ARAP Password, page 7-8
•
Assigning a User to a Group, page 7-9
•
Setting User Callback Option, page 7-10
•
Assigning a User to a Client IP Address, page 7-11
•
Setting Network Access Restrictions for a User, page 7-12
•
Setting Max Sessions Options for a User, page 7-16
•
Setting User Usage Quotas Options, page 7-18
•
Setting Options for User Account Disablement, page 7-20
•
Assigning a PIX ACL to a User, page 7-21
Beyond these basic user setup options, there are also procedures for configuring
a user account for authentication via and RADIUS; these procedures
are located in
Advanced User Authentication Settings, page 7-22
.
Note
The steps for editing user account settings are essentially identical to those used
when adding a user account but, to edit, you navigate directly to the field or fields
to be changed. You cannot edit the name associated with a user account; to change
a username you must delete the user account and establish another.