Database, Or Leap Proxy Radius Server Database - Cisco 2509 - Router - EN User Manual

Chapter 12 Administering External User Databases
Creating a Cisco Secure ACS Group Mapping for a Token Server, ODBC Database,
or LEAP Proxy RADIUS Server Database
Step 1
Step 2
Step 3
Step 4
Step 5
78-14696-01, Version 3.1
For more information about specifying group membership for users authenticated
with one of these database types, see
page 12-22.
Additionally, users authenticated by an ODBC external user database can also be
assigned to a specified Cisco Secure ACS group. Group specification by ODBC
database authentication overrides group mapping. For more information about
specifying group membership for users authenticated with an ODBC database, see
ODBC Database, page
To set or change a token server, ODBC, or LEAP Proxy RADIUS Server database
group mapping, follow these steps:
In the navigation bar, click External User Databases.
Click Database Group Mappings.
Click the name of the token server, LEAP Proxy RADIUS Server, or ODBC
database configuration for which you want to configure a group mapping.
Result: The Define Group Mapping table appears.
From the Select a default group for database list, click the group to which users
authenticated with this database should be assigned.
The Select a default group for database list displays the number of users
Tip
assigned to each group.
Click Submit.
Result: Cisco Secure ACS assigns unknown and discovered users authenticated
by the external database type you selected in Step 3 to the Cisco Secure ACS
group selected in Step 4. For users authenticated by an ODBC, CRYPTOCard,
Safeword, ActivCard, Vasco, PassGo, or LEAP Proxy RADIUS Server database,
the mapping is only applied as a default if those databases did not specify a
Cisco Secure ACS group for the user.
RADIUS-Based Group Specification,
11-39.
User Guide for Cisco Secure ACS for Windows Server
Database Group Mappings
12-13