7-43
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 7 Setting Up and Managing User Accounts
Advanced User Authentication Settings
Step 2
Before configuring Ascend RADIUS attributes, be sure your IETF RADIUS
attributes are configured properly. For more information about setting IETF
RADIUS attributes, see
Setting IETF RADIUS Parameters for a User, page 7-38
.
Step 3
In the Ascend RADIUS Attributes table, to specify the attributes that should be
authorized for the user, follow these steps:
a.
Select the check box next to the particular attribute.
b.
Further define the authorization for that attribute in the box next to it.
c.
Continue to select and define attributes, as applicable.
For more information about attributes, see
Appendix C, “RADIUS
Attributes,”
or your AAA client documentation.
Step 4
Do one of the following:
•
If you are finished configuring the user account options, click Submit to
record the options.
•
To continue to specify the user account options, perform other procedures in
this chapter, as applicable.
Setting Cisco VPN 3000 Concentrator RADIUS Parameters for a User
The Cisco VPN 3000 Concentrator RADIUS attribute configurations appear only
if all the following are true:
•
A AAA client has been configured to use RADIUS (Cisco VPN 3000) in
Network Configuration.
•
The Per-user /RADIUS Attributes check box is selected under
Advanced Options in the Interface Configuration section.
•
User-level RADIUS (Cisco VPN 3000) attributes you want to apply have
been enabled under RADIUS (Cisco VPN 3000) in the Interface
Configuration section.
Cisco VPN 3000 Concentrator RADIUS represents only the Cisco VPN 3000
Concentrator VSA. You must configure both the IETF RADIUS and Cisco VPN
3000 Concentrator RADIUS attributes.