Cisco 2509 - Router - EN User Manual page 194

Configuration-specific User Group Settings
Before You Begin
•
•
•
To specify PIX command authorization set parameters for a user group,
In the navigation bar, click Group Setup.
Step 1
Result: The Group Setup Select page opens.
From the Group list, select a group, and then click Edit Settings.
Step 2
Result: The Group Settings page displays the name of the group at its top.
Step 3 From the Jump To list at the top of the page, choose TACACS+.
Result: The system displays the TACACS+ Settings table section.
Scroll down to the PIX Command Authorization Set feature area within the
Step 4
TACACS+ Settings table.
Step 5 To prevent the application of any PIX command authorization set, select (or
accept the default of) the None option.
Step 6 To assign a particular PIX command authorization set to be effective on any
configured network device, follow these steps:
a.
b.
To create associations that assign a particular PIX command authorization set to
Step 7
be effective on a particular NDG, for each association, follow these steps:
a.
b.
User Guide for Cisco Secure ACS for Windows Server
6-34
Ensure that a AAA client has been configured to use TACACS+ as the
security control protocol.
On the TACACS+ (Cisco) page of Interface Configuration section, ensure
that the PIX Shell (pixShell) option is selected in the Group column.
Ensure that you have already configured one or more PIX command
authorization sets. For detailed steps, see
Configuration, page 5-16.
Select the Assign a PIX Command Authorization Set for any network
device option.
From the list directly below that option, select the PIX command
authorization set you want applied to this user group.
Select the Assign a PIX Command Authorization Set on a per Network
Device Group Basis option.
Select a Device Group and an associated Command Set.
Chapter 6 Setting Up and Managing User Groups
Command Authorization Sets
78-14696-01, Version 3.1