Cisco 2509 - Router - EN User Manual page 642

Action Codes
Table F-6 Action Codes for Modifying Network Configuration (continued)
Action
Code Name
351 DEL_UDV
352 ADD_VSA
User Guide for Cisco Secure ACS for Windows Server
F-30
Required Description
V1 Removes the vendor with the IETF code specified in V1
and any defined VSAs.
Note Action code 351 does not remove any instances of
VSAs assigned to Cisco Secure ACS groups or
users. If Cisco Secure ACS has AAA clients
configured with the UDV specified in V1, the
delete operation fails.
VN, V1, Adds a new VSA to the vendor specified by the vendor
V2, V3 IETF code in V1.
VN is the VSA name. If the vendor name is MyCo and the
attribute is assigned a group ID, we recommend prefixing
the vendor name or an abbreviation to all VSAs. For
example, VSAs could be "MyCo-Assigned-Group-Id".
VSA names must be unique to both the vendor
Note
and to the Cisco Secure ACS dictionary. For
example, "MyCo-Framed-IP-Address" is allowed
but "Framed-IP-Address" is not, because
"Framed-IP-Address" is used by IETF action
code 8 in the RADIUS attributes.
V2 is the VSA number. This must be in the 0-255 range.
V3 is the VSA type as one of following values:
INTEGER
•
• STRING
• IPADDR
By default, VSAs are assumed to be outbound (or
authorization) attributes. If the VSA is either
multi-instance or used in accounting messages, use
SET_VSA_PROFILE (Action code 353).
Appendix F RDBMS Synchronization Import Definitions
78-14696-01, Version 3.1