Cisco 2509 - Router - EN User Manual page 626

Action Codes
Table F-3 User Creation and Modification Action Codes (continued)
Action
Code Name
270 SET_DCS_TYPE
User Guide for Cisco Secure ACS for Windows Server
F-14
Required Description
UN|GN,VN Set the type of device command set (DCS) authorization
,V1, for a group or user.
Optionally
VN defines the service. Valid service types are:
V2
shell—Cisco IOS shell command authorization.
•
pixshell—Cisco PIX command authorization.
•
Note If additional DCS types have been added to your
Cisco Secure ACS, you can find the valid value in
the Interface Configuration page for TACACS+
(Cisco IOS). The valid values appear in
parentheses after the service title, such as
Shell (pixshell)
V1 defines the assignment type. The valid values for VN
are:
• none—Sets no DCS for the user or group.
as group—For users only, this value signifies that
•
the user DCS settings for the service specified should
be the same as the user group DCS settings.
• static—Sets a DCS for the user or group for all
devices enabled to perform command authorization
for the service specified.
If V1 is set to static, V2 is required and must contain
the name of the DCS to assign to the user or group for
the given service.
• ndg—Specifies that command authorization for the
user or group is to be done on a per-NDG basis. Use
action 271 to add DCS to NDG mappings for the user
or group.
Note Changing a user or group assignment type (V1)
results in clearing previous data, including NDG
to DCS mappings (defined by action 271).
Appendix F RDBMS Synchronization Import Definitions
.
PIX
78-14696-01, Version 3.1