6-43
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 6 Setting Up and Managing User Groups
Configuration-specific User Group Settings
Step 2
In the navigation bar, click Group Setup.
Result: The Group Setup Select page opens.
Step 3
From the Group list, select a group, and then click Edit Settings.
Result: The Group Settings page displays the name of the group at its top.
Step 4
From the Jump To list at the top of the page, choose RADIUS (Cisco VPN 3000).
Step 5
In the Cisco VPN 3000 Concentrator RADIUS Attributes table, determine the
attributes to be authorized for the group by selecting the check box next to the
attribute. Further define the authorization for that attribute in the field next to it.
For more information about attributes, see
Appendix C, “RADIUS Attributes,”
or
the documentation for network devices using RADIUS.
Step 6
To save the group settings you have just made, click Submit.
For more information, see
Saving Changes to User Group Settings, page 6-53
.
Step 7
To continue specifying other group settings, perform other procedures in this
chapter, as applicable.
Configuring Cisco VPN 5000 Concentrator RADIUS Settings for a
User Group
The Cisco VPN 5000 Concentrator RADIUS attribute configurations display only
when both the following are true:
•
A network device has been configured to use RADIUS (Cisco VPN 5000) in
Network Configuration.
•
Group-level RADIUS (Cisco VPN 5000) attributes have been enabled on the
RADIUS (Cisco VPN 5000) page of the Interface Configuration section.
Cisco VPN 5000 Concentrator RADIUS represents only the Cisco VPN 5000
Concentrator VSA. You must configure both the IETF RADIUS and Cisco VPN
5000 Concentrator RADIUS attributes.
Note
To hide or display Cisco VPN 5000 Concentrator RADIUS attributes, see
Setting
Protocol Configuration Options for Non-IETF RADIUS Attributes, page 3-16
. A
VSA applied as an authorization to a particular group persists, even when you
