Chapter 7 Setting Up and Managing User Accounts
Basic User Setup Options
7-16
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Tip
This is also the selection to use if you want to restrict access based on
other values such as a Cisco Aironet AP MAC address. For more
information, see
About Network Access Restrictions, page 5-6
.
d.
Click enter.
Result: The information, specifying the AAA client, port, CLI, and DNIS
appears in the table above the AAA Client list.
Step 5
Do one of the following:
•
If you are finished configuring the user account options, click Submit to
record the options.
•
To continue to specify the user account options, perform other procedures in
this chapter, as applicable.
Setting Max Sessions Options for a User
The Max Sessions feature enables you to set the maximum number of
simultaneous connections permitted for this user. For Cisco Secure ACS
purposes, a session is considered any type of user connection supported by
RADIUS or , for example PPP, or Telnet, or ARAP. Note, however,
that accounting must be enabled on the AAA client for Cisco Secure ACS to be
aware of a session. All session counts are based on user and group names only.
Cisco Secure ACS does not support any differentiation by type of session—all
sessions are counted as the same. To illustrate, a user with a Max Session count
of 1 who is dialed in to a AAA client with a PPP session will be refused a
connection if that user then tries to Telnet to a location whose access is controlled
by the same Cisco Secure ACS.
Note
Each Cisco Secure ACS server holds its own Max Sessions counts. There is no
mechanism for Cisco Secure ACS to share Max Sessions counts across multiple
servers. Therefore, if two Cisco Secure ACS servers are set up as a mirror pair
with the workload distributed between them, they will have completely
independent views of the Max Sessions totals.
