Configuring A Radius Server; Configuring Authentication Settings On The Radius Server; Configuring Accounting Settings On The Radius Server; Defining Private Attributes For Virtualization Support In A Radius Server - Cisco 4700M Configuration Manual

Chapter 2 Configuring Authentication and Accounting Services
Step 5
Step 6

Configuring a RADIUS Server

Configuring Authentication Settings on the RADIUS Server

Step 1
OL-16202-01
Under the Checking This option Will PERMIT all UNKNOWN Services section
of the page, check the Default (Undefined) Services check box to permit
unknown services.
Click Submit when you finish configuring the TACACS+ role and domain
settings.
For example, if USER1 is assigned the role ADMIN and the domain
MYDOMAIN1 (where shell:Admin=ADMIN MYDOMAIN1), then one of the
following can occur:
If USER1 logs in through the Admin context, that user is automatically
•
assigned the Admin role and the MyDomain1 domain.
If USER1 logs in through a different context, that user is automatically
•
assigned the default role (Network-Monitor) and the default domain
(default-domain). In this case, the user profile attribute is not obtained from
the TACACS+ server during authentication.
This section contains the following topics:
Configuring Authentication Settings on the RADIUS Server
•
•

Configuring Accounting Settings on the RADIUS Server

Defining Private Attributes for Virtualization Support in a RADIUS Server

•
To configure the RADIUS authentication settings on Cisco Secure ACS, perform
:
the following steps
Go to the Network Configuration section of the Cisco Secure ACS HTML
interface.
If you are using Network Device Groups (NDGs), you must also click the
Note
name of the NDG to which you want to add the AAA client entry.
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
Configuring the AAA Server
2-15