Cisco 2509 - Router - EN User Manual page 258

Advanced User Authentication Settings
To hide or display Cisco VPN 3000 Concentrator RADIUS attributes, see
Note
Protocol Configuration Options for Non-IETF RADIUS Attributes, page
VSA applied as an authorization to a particular user persists, even when you
remove or replace the associated AAA client; however, if you have no AAA
clients of this (vendor) type configured, the VSA settings do not appear in the user
configuration interface.
To configure and enable Cisco VPN 3000 Concentrator RADIUS attributes to be
applied as an authorization for the current user, follow these steps:
Step 1 Perform Step 1 through Step 3 of
Result: The User Setup Edit page opens. The username being added or edited is
at the top of the page.
Before configuring Cisco VPN 3000 Concentrator RADIUS attributes, be sure
Step 2
your IETF RADIUS attributes are configured properly.
For more information about setting IETF RADIUS attributes, see
RADIUS Parameters for a User, page
Step 3 In the Cisco VPN 3000 Concentrator Attribute table, to specify the attributes that
should be authorized for the user, follow these steps:
a.
b.
c.
Step 4 Do one of the following:
•
•
User Guide for Cisco Secure ACS for Windows Server
7-44
Select the check box next to the particular attribute.
Further define the authorization for that attribute in the box next to it.
Continue to select and define attributes, as applicable.
For more information about attributes, see
Attributes," or your AAA client documentation.
If you are finished configuring the user account options, click Submit to
record the options.
To continue to specify the user account options, perform other procedures in
this chapter, as applicable.
Chapter 7 Setting Up and Managing User Accounts
Adding a Basic User Account, page
7-38.
Appendix C, "RADIUS
Setting
3-16. A
7-5.
Setting IETF
78-14696-01, Version 3.1