6-17
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Chapter 6 User Group Management
Configuration-specific User Group Settings
•To cause specific protocol attributes to appear on a group profile page, you
must enable the display of those attributes in the Interface Configuration
section of the HTML interface. For more information, see Protocol
Configuration Options for TACACS+, page 3-7, or Protocol Configuration
Options for RADIUS, page 3-11.
This section contains the following topics:
•Setting Token Card Settings for a User Group, page 6-18
•Setting Enable Privilege Options for a User Group, page 6-19
•Enabling Password Aging for the CiscoSecure User Database, page 6-21
•Enabling Password Aging for Users in Windows Databases, page 6-26
•Setting IP Address Assignment Method for a User Group, page 6-28
•Assigning a Downloadable IP ACL to a Group, page 6-30
•Configuring TACACS+ Settings for a User Group, page 6-31
•Configuring a Shell Command Authorization Set for a User Group, page 6-33
•Configuring a PIX Command Authorization Set for a User Group, page 6-35
•Configuring Device-Management Command Authorization for a User Group,
page 6-37
•Configuring IETF RADIUS Settings for a User Group, page 6-38
•Configuring Cisco IOS/PIX RADIUS Settings for a User Group, page 6-40
•Configuring Cisco Aironet RADIUS Settings for a User Group, page 6-41
•Configuring Ascend RADIUS Settings for a User Group, page 6-43
•Configuring Cisco VPN 3000 Concentrator RADIUS Settings for a User
Group, page 6-44
•Configuring Cisco VPN 5000 Concentrator RADIUS Settings for a User
Group, page 6-46
•Configuring Microsoft RADIUS Settings for a User Group, page 6-47
•Configuring Nortel RADIUS Settings for a User Group, page 6-49
•Configuring Juniper RADIUS Settings for a User Group, page 6-50
•Configuring BBSM RADIUS Settings for a User Group, page 6-51
•Configuring Custom RADIUS VSA Settings for a User Group, page 6-53