Configuring Custom Radius Vsa Settings For A User Group - Cisco 3.3 User Manual

Chapter 6 User Group Management

Configuring Custom RADIUS VSA Settings for a User Group

Step 1
Step 2
Step 3
Step 4
Step 5
78-16592-01
User-defined, custom Radius VSA configurations appear only when all the
following are true:
You have defined and configured the custom RADIUS VSAs. (For
•
information about creating user-defined RADIUS VSAs, see
RADIUS Vendors and VSAs, page
A network device has been configured in Network Configuration that uses a
•
RADIUS protocol that supports the custom VSA.
• Group-level custom RADIUS attributes have been enabled on the RADIUS
(Name) page of the Interface Configuration section.
You must configure both the IETF RADIUS and the custom RADIUS attributes.
To configure and enable custom RADIUS attributes to be applied as an
authorization for each user in the current group, follow these steps:
Confirm that your IETF RADIUS attributes are configured properly.
For more information about setting IETF RADIUS attributes, see
IETF RADIUS Settings for a User Group, page
In the navigation bar, click Group Setup.
The Group Setup Select page opens.
From the Group list, select a group, and then click Edit Settings.
The Group Settings page displays the name of the group at its top.
From the Jump To list at the top of the page, choose RADIUS (custom name).
In the RADIUS (custom name) Attributes table, specify the attributes to be
authorized for the group by selecting the check box next to the attribute. Where
applicable, further define the authorization for that attribute in the field next to it.
For more information about attributes, see
the documentation for network devices using RADIUS.
The MS-CHAP-MPPE-Keys attribute value is autogenerated by
Note
Cisco Secure ACS; there is no value to set in the HTML interface.
Configuration-specific User Group Settings
9-28.)
Appendix C, "RADIUS
User Guide for Cisco Secure ACS for Windows Server
Custom
Configuring
6-38.
Attributes", or
6-53