Chapter 3 Interface Configuration
Advanced Options
3-4
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Restarting Cisco Secure ACS-related Windows services should be done
during off hours because it briefly interrupts authentication,
authorization, and accounting.
Advanced Options
The Advanced Options page enables you to determine which advanced features
Cisco Secure ACS displays. You can simplify the pages displayed in other areas
of the Cisco Secure ACS HTML interface by hiding advanced features that you
do not use.
Caution Disabling an advanced feature in the Interface Configuration section does not
affect anything except the display of that feature in the HTML interface. Settings
made while an advanced feature was displayed remain in effect when that
advanced feature is no longer displayed. Further, the interface displays any
advanced feature that has non-default settings, even if you have configured that
advanced feature to be hidden. If you later disable the feature or delete its settings,
Cisco Secure ACS hides the advanced feature. The only exception is the Network
Device Groups feature. Regardless of whether Network Device Groups are in use,
they are hidden when deselected on the Advanced Options page.
The advanced option features include the following:
•Per-User TACACS+/RADIUS Attributes—When selected, this feature
enables TACACS+/RADIUS attributes to be set at a per-user level, in addition
to being set at the group level.
•User-Level Shared Network Access Restrictions—When selected, this
feature enables the Shared Profile Component network access restrictions
(NARs) options on the User Setup page. These options allow you to apply
previously configured, named, IP-based and CLID/DNIS-based NARs at the
user level. For information on defining a NAR, or NAR set, within Shared
Profile Components, see Adding a Shared Network Access Restriction,
page 5-19.