Setting Max Sessions Options For A User - Cisco 2509 - Router - EN User Manual

Basic User Setup Options
Step 5

Setting Max Sessions Options for a User

Note
User Guide for Cisco Secure ACS for Windows Server
7-16
This is also the selection to use if you want to restrict access based on
Tip
other values such as a Cisco Aironet AP MAC address. For more
information, see
Click enter.
d.
Result: The information, specifying the AAA client, port, CLI, and DNIS
appears in the table above the AAA Client list.
Do one of the following:
If you are finished configuring the user account options, click Submit to
•
record the options.
To continue to specify the user account options, perform other procedures in
•
this chapter, as applicable.
The Max Sessions feature enables you to set the maximum number of
simultaneous connections permitted for this user. For Cisco Secure ACS
purposes, a session is considered any type of user connection supported by
RADIUS or TACACS+, for example PPP, or Telnet, or ARAP. Note, however,
that accounting must be enabled on the AAA client for Cisco Secure ACS to be
aware of a session. All session counts are based on user and group names only.
Cisco Secure ACS does not support any differentiation by type of session—all
sessions are counted as the same. To illustrate, a user with a Max Session count
of 1 who is dialed in to a AAA client with a PPP session will be refused a
connection if that user then tries to Telnet to a location whose access is controlled
by the same Cisco Secure ACS.
Each Cisco Secure ACS server holds its own Max Sessions counts. There is no
mechanism for Cisco Secure ACS to share Max Sessions counts across multiple
servers. Therefore, if two Cisco Secure ACS servers are set up as a mirror pair
with the workload distributed between them, they will have completely
independent views of the Max Sessions totals.
Chapter 7
About Network Access Restrictions, page
Setting Up and Managing User Accounts
5-6.
78-14696-01, Version 3.1