6-37
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 6 Setting Up and Managing User Groups
Configuration-specific User Group Settings
Configuring IETF RADIUS Settings for a User Group
These parameters appear only when both the following are true:
•
A AAA client has been configured to use one of the RADIUS protocols in
Network Configuration.
•
Group-level RADIUS attributes have been enabled on the RADIUS (IETF)
page in the Interface Configuration section of the HTML interface.
RADIUS attributes are sent as a profile for each user from Cisco Secure ACS to
the requesting AAA client. To display or hide any of these attributes, see
Protocol
Configuration Options for RADIUS, page 3-10
. For a list and explanation of
RADIUS attributes, see
Appendix C, “RADIUS Attributes”
. For more
information about how your AAA client uses RADIUS, refer to your AAA client
vendor documentation.
To configure IETF RADIUS attribute settings to be applied as an authorization for
each user in the current group, follow these steps:
Step 1
In the navigation bar, click Group Setup.
Result: The Group Setup Select page opens.
Step 2
From the Group list, select a group, and then click Edit Settings.
Result: The Group Settings page displays the name of the group at its top.
Step 3
From the Jump To list at the top of the page, choose RADIUS (IETF).
Step 4
For each IETF RADIUS attribute you need to authorize for the current group,
select the check box next to the attribute and then define the authorization for the
attribute in the field or fields next to it.
Step 5
To save the group settings you have just made, click Submit.
For more information, see
Saving Changes to User Group Settings, page 6-53
.
Step 6
To configure the vendor-specific attributes (VSAs) for any RADIUS network
device vendor supported by Cisco Secure ACS, see the appropriate section:
•
Configuring Cisco IOS/PIX RADIUS Settings for a User Group, page 6-38
•
Configuring Cisco Aironet RADIUS Settings for a User Group, page 6-39
•
Configuring Ascend RADIUS Settings for a User Group, page 6-41
•
Configuring Cisco VPN 3000 Concentrator RADIUS Settings for a User
Group, page 6-42
