D-29
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Appendix D Cisco Secure ACS Command-Line Database Utility
User-Defined RADIUS Vendors and VSA Sets
Before You Begin
•
Define a custom RADIUS vendor and VSA set in a RADIUS vendor/VSA
import file. For more information, see
RADIUS Vendor/VSA Import File,
page D-33
.
•
Determine the RADIUS vendor slot to which you want to add the new
RADIUS vendor and VSAs. For more information, see
Listing Custom
RADIUS Vendors, page D-31
.
•
Ensure that regedit is not running. If regedit is running on the
Cisco Secure ACS Windows server, it can prevent Registry updates required
for adding a custom RADIUS vendor and VSA set.
To add a custom RADIUS VSA to Cisco Secure ACS, follow these steps:
Step 1
On the Cisco Secure ACS server, open an MS DOS command prompt and change
directories to the directory containing CSUtil.exe. For more information about the
location of CSUtil.exe, see
Location of CSUtil.exe and Related Files, page D-2
.
Step 2
Type:
CSUtil.exe -addUDV
slot-number filename
where slot-number is an unused Cisco Secure ACS RADIUS vendor slot and
filename is the name of a RADIUS vendor/VSA import file. The filename can
include a relative or absolute path to the RADIUS vendor/VSA import file. Press
Enter.
For example, to add the RADIUS vendor defined in
d:\acs\myvsa.ini
to slot 5,
the command would be:
CSUtil.exe -addUDV 5 d:\acs\myvsa.ini
Result: CSUtil.exe displays a confirmation prompt.
Step 3
To confirm that you want to add the RADIUS vendor and halt all
Cisco Secure ACS services during the process, type Y and press Enter.
Result: CSUtil.exe halts Cisco Secure ACS services, parses the vendor/VSA input
file, and adds the new RADIUS vendor and VSAs to Cisco Secure ACS. This
process may take a few minutes. After it is complete, CSUtil.exe restarts
Cisco Secure ACS services.
