Cisco 3.3 User Manual page 175

Chapter 5 Shared Profile Components
d.
e.
If you want to permit or deny access based on calling location or values other than
Step 7
IP addresses, follow these steps:
a.
b.
c.
Tip
78-16592-01
The total number of characters in the AAA Client list and the Port and
Note
Src IP Address boxes must not exceed 1024. Although Cisco Secure
ACS accepts more than 1024 characters when you add a NAR, you
cannot edit the NAR and Cisco Secure ACS cannot accurately apply
it to users.
Click enter.
The AAA client, port, and address information appears as a line item in the
table.
To enter additional IP-based line items, repeat
Select the Define CLI/DNIS based access restrictions check box.
To specify whether you are listing locations that are permitted or denied, from
the Table Defines list, select the applicable value.
To specify the clients that this NAR applies to, select one of the following
values from the AAA Client list:
The name of the NDG
•
The name of the NAF
•
The name of the particular AAA client
•
All AAA clients
•
Only NDGs that you have already configured are listed.
User Guide for Cisco Secure ACS for Windows Server
Network Access Restrictions
c. and d..
5-21