Setting Enable Privilege Options For A User Group - Cisco 2509 - Router - EN User Manual

Configuration-specific User Group Settings
Step 5
Step 6
Step 7

Setting Enable Privilege Options for a User Group

Note
User Guide for Cisco Secure ACS for Windows Server
6-18
Also in the Token Card Settings table, to cache the token for a specified time
period (measured from the time of first authentication), follow these steps:
Select Duration.
a.
Type the duration length in the box.
b.
Select the unit of measure, either Seconds, Minutes or Hours.
c.
To save the group settings you have just made, click Submit.
For more information, see
To continue specifying other group settings, perform other procedures in this
chapter, as applicable.
If this section does not appear, click Interface Configuration and then click
TACACS+ (Cisco). At the bottom of the page in the Advanced Configuration
Options table, select the Advanced TACACS+ features check box.
Perform this procedure to configure group-level TACACS+ enable parameters.
The three possible TACACS+ enable options are as follows:
• No Enable Privilege—(default) Select this option to disallow enable
privileges for this user group.
• Max Privilege for Any AAA Client—Select this option to select the
maximum privilege level for this user group for any AAA client on which this
group is authorized.
Define max Privilege on a per-network device group basis—Select this
•
option to define maximum privilege levels for an NDG. To use this option,
you create a list of device groups and corresponding maximum privilege
levels. See your AAA client documentation for information about privilege
levels.
Chapter 6
Saving Changes to User Group Settings, page
Setting Up and Managing User Groups
78-14696-01, Version 3.1
6-53.