Cisco 3.3 User Manual page 174

Network Access Restrictions
To add a shared NAR, follow these steps:
In the navigation bar, click Shared Profile Components.
Step 1
The Shared Profile Components page appears.
Click Network Access Restrictions.
Step 2
Click Add.
Step 3
The Network Access Restriction page appears.
In the Name box, type a name for the new shared NAR.
Step 4
Note
In the Description box, type a description of the new shared NAR.
Step 5
If you want to permit or deny access based on IP addressing, follow these steps:
Step 6
a.
b.
c.
User Guide for Cisco Secure ACS for Windows Server
5-20
The name can contain up to 31 characters. Leading and trailing spaces are
not allowed. Names cannot contain the following four characters:
[ ] , /
Select the Define IP-based access descriptions check box.
To specify whether you are listing addresses that are permitted or denied,
from the Table Defines list, select the applicable value.
Select or type the applicable information in each of the following boxes:
AAA Client—Select All AAA clients, or the name of the NDG, or the
•
NAF, or the individual AAA client, to which access is permitted or
denied.
Port—Type the number of the port that you want to permit or deny access
•
to. You can use the wildcard asterisk (*) to permit or deny access to all
ports on the selected AAA client.
Src IP Address—Type the IP address to filter on when performing
•
access restrictions. You can use the wildcard asterisk (*) to specify all IP
addresses.
Chapter 5 Shared Profile Components
78-16592-01