Advanced Options - Cisco 2509 - Router - EN User Manual

Advanced Options

Advanced Options
Caution
User Guide for Cisco Secure ACS for Windows Server
3-4
The Advanced Options page enables you to determine which advanced features
Cisco Secure ACS displays. You can simplify the pages displayed in other areas
of the Cisco Secure ACS HTML interface by hiding advanced features that you
do not use.
Disabling an advanced feature in the Interface Configuration section does not
affect anything except the display of that feature in the HTML interface. Settings
made while an advanced feature was displayed remain in effect when that
advanced feature is no longer displayed. Further, the interface displays any
advanced feature that has non-default settings, even if you have configured that
advanced feature to be hidden. If you later disable the feature or delete its settings,
Cisco Secure ACS hides the advanced feature. The only exception is the Network
Device Groups feature. Regardless of whether Network Device Groups are in use,
they are hidden when deselected on the Advanced Options page.
The advanced option features include the following:
• Per-User TACACS+/RADIUS Attributes—When selected, this feature
enables TACACS+/RADIUS attributes to be set at a per-user level, in addition
to being set at the group level.
User-Level Shared Network Access Restrictions—When selected, this
•
feature enables the Shared Profile Component network access restrictions
(NARs) options on the User Setup page. These options allow you to apply
previously configured, named, IP-based and CLID/DNIS-based NARs at the
user level. For information on defining a NAR, or NAR set, within Shared
Profile Components, see
page 5-8.
User-Level Network Access Restrictions—When selected, this feature
•
enables the two sets of options for defining user-level, IP-based and
CLI/DNIS-based NARs on the User Setup page.
• User-Level Downloadable ACLs—When selected, this feature enables the
Downloadable ACLs (access control lists) section on the User Setup page.
• Default Time-of-Day/Day-of-Week Specification—When selected, this
feature enables the default time-of-day/day-of-week access settings grid on
the Group Setup page.
Chapter 3 Setting Up the Cisco Secure ACS HTML Interface
Shared Network Access Restrictions Configuration,
78-14696-01, Version 3.1