Setting Ip Address Assignment Method For A User Group - Cisco 3.3 User Manual

For windows server version 3.3
Table of Contents

Advertisement

Configuration-specific User Group Settings
Tip
Tip

Setting IP Address Assignment Method for a User Group

User Guide for Cisco Secure ACS for Windows Server
6-28
Users must be using a client that supports EAP-FAST.
You must enable EAP-FAST on the Global Authentication Configuration
page within the System Configuration section.
For information about enabling EAP-FAST in System Configuration, see
Authentication Setup, page
You must enable EAP-FAST password changes on the Windows
Authentication Configuration page within the External User Databases
section.
For information about enabling EAP-FAST password changes, see
Database, page
13-7.
Users whose Windows accounts reside in "remote" domains (that is, not the
domain within which Cisco Secure ACS is running) can only use the
Windows-based password aging if they supply their domain names.
The methods and functionality of Windows password aging differ according to
which Microsoft Windows operating system you are using, and whether you
employ Active Directory (AD) or Security Accounts Manager (SAM). Setting
password aging for users in the Windows user database is only one part of the
larger task of setting security policies in Windows. For comprehensive
information on Windows procedures, refer to your Windows system
documentation.
Perform this procedure to configure the way Cisco Secure ACS assigns IP
addresses to users in the group. The four possible methods are as follows:
No IP address assignment—No IP address is assigned to this group.
Assigned by dialup client—Use the IP address that is configured on the
dialup client network settings for TCP/IP.
Chapter 6
10-26.
User Group Management
Global
Windows User
78-16592-01

Advertisement

Table of Contents
loading

This manual is also suitable for:

Secure access control serverSecure acs

Table of Contents