Cisco Servers User Manual page 472

Chapter 12 Administering External User Databases
Database Group Mappings
To enable per-user group mapping, configure the external user database to return
authentication responses that contain the Cisco IOS/PIX RADIUS attribute 1,
[009\001] cisco-av-pair with the following value:
N
ACS:CiscoSecure-Group-Id =
where N is the Cisco Secure ACS group number (0 through 499) to which
Cisco Secure ACS should assign the user. For example, if the LEAP Proxy
RADIUS Server authenticated a user and included the following value for the
Cisco IOS/PIX RADIUS attribute 1, [009\001] cisco-av-pair:
ACS:CiscoSecure-Group-Id = 37
Cisco Secure ACS assigns the user to group 37 and applies authorization
associated with group 37.
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
12-22
78-13751-01, Version 3.0