Setting Network Access Restrictions For A User - Cisco 2509 - Router - EN User Manual

Basic User Setup Options
Step 3

Setting Network Access Restrictions for a User

User Guide for Cisco Secure ACS for Windows Server
7-12
Assigned by AAA client pool—Select this option and type the AAA client
•
IP pool name in the box, if this user is to have the IP address assigned by an
IP address pool configured on the AAA client.
Assigned from AAA pool—Select this option and type the applicable pool
•
name in the box, if this user is to have the IP address assigned by an IP
address pool configured on the AAA server. Select the AAA server IP pool
name from the Available Pools list, and then click --> (right arrow button) to
move the name into the Selected Pools list. If there is more than one pool in
the Selected Pools list, the users in this group are assigned to the first
available pool in the order listed. To move the position of a pool in the list,
select the pool name and click Up or Down until the pool is in the position
you want.
Do one of the following:
If you are finished configuring the user account options, click Submit to
•
record the options.
To continue to specify the user account options, perform other procedures in
•
this chapter, as applicable.
The Network Access Restrictions table in the Advanced Settings area of User
Setup enables you to set NARs in three distinct ways:
• Apply existing shared NARs by name.
Define IP-based access restrictions to permit or deny user access to a
•
specified AAA client or to specified ports on a AAA client when an IP
connection has been established.
• Define CLI/DNIS-based access restrictions to permit or deny user access
based on the CLI/DNIS used.
You can also use the CLI/DNIS-based access restrictions area to
Note
specify other values. For more information, see
Access Restrictions, page
Chapter 7 Setting Up and Managing User Accounts
5-6.
About Network
78-14696-01, Version 3.1