Cisco 2509 - Router - EN User Manual page 248

Advanced User Authentication Settings
For information about privilege levels, refer to your AAA client documentation.
Note
You must configure NDGs from within Interface Configuration before you can
Tip
assign user privilege levels to them.
To select and specify the privilege level for a user, follow these steps:
Perform Step 1 through Step 3 of
Step 1
Result: The User Setup Edit page opens. The username being added or edited is
at the top of the page.
Step 2 Under TACACS+ Enable Control in the Advanced TACACS+ Settings table,
select one of the four privilege options, as follows:
•
•
•
•
Step 3 If you selected Max Privilege for Any Access Server in Step 2, select the
appropriate privilege level from the corresponding list.
If you selected Define Max Privilege on a per-Network Device Group Basis in
Step 4
Step 2, perform the following steps to define the privilege levels on each NDG,
as applicable:
a.
b.
User Guide for Cisco Secure ACS for Windows Server
7-34
Use Group Level Setting
No Enable Privilege
(No Enable Privilege is the default setting; when setting up an new
Note
user account, it should already be selected.)
Max Privilege for Any Access Server
Define Max Privilege on a per-Network Device Group Basis
From the Device Group list, select a device group.
You must have already configured a device group for it to be listed.
Note
From the Privilege list, select a privilege level to associate with the selected
device group.
Chapter 7 Setting Up and Managing User Accounts
Adding a Basic User Account, page 7-5.
78-14696-01, Version 3.1