Cisco 2509 - Router - EN User Manual page 169

Chapter 6 Setting Up and Managing User Groups
To define and apply a NAR, for this particular user group, that permits or denies
Step 4
access to this group based on IP address, or IP address and port, follow these
steps:
Tip You should define most NARs from within the Shared Components section so that
the restrictions can be applied to more than one group or user. For more
information, see
a.
b.
c.
d.
To permit or deny access to this user group based on calling location or values
Step 5
other than an established IP address, follow these steps:
a.
b.
78-14696-01, Version 3.1
Shared Network Access Restrictions Configuration, page
In the Per Group Defined Network Access Restrictions section of the
Network Access Restrictions table, select the Define IP-based access
restrictions check box.
To specify whether the subsequent listing specifies permitted or denied IP
addresses, from the Table Defines list, select either Permitted Calling/Point
of Access Locations or Denied Calling/Point of Access Locations.
Select or enter the information in the following boxes:
AAA Client—Select either All AAA Clients or the name of the NDG or
•
the name of the individual AAA client to which to permit or deny access.
Port—Type the number of the port to which to permit or deny access.
•
You can use the wildcard asterisk (*) to permit or deny access to all ports
on the selected AAA client.
• Address—Type the IP address or addresses to filter on when performing
access restrictions. You can use the wildcard asterisk (*).
Click Enter.
Result: The specified the AAA client, port, and address information appears
in the NAR Access Control list.
Select the Define CLI/DNIS-based access restrictions check box.
To specify whether the subsequent listing specifies permitted or denied
values, from the Table Defines list, select one of the following:
Permitted Calling/Point of Access Locations
•
• Denied Calling/Point of Access Locations
User Guide for Cisco Secure ACS for Windows Server
Common User Group Settings
5-8.
6-9