7-13
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Chapter 7 User Management
Basic User Setup Options
Step 2 To apply a previously configured shared NAR to this user, follow these steps:
Note To apply a shared NAR, you must have configured it under Network
Access Restrictions in the Shared Profile Components section. For more
information, see Adding a Shared Network Access Restriction,
page 5-19.
a. Select the Only Allow network access when check box.
b. To specify whether one or all shared NARs must apply for the user to be
permitted access, select one of the following two options, as applicable:
•All selected NARS result in permit
•Any one selected NAR results in permit
c. Select a shared NAR name in the NARs list, and then click --> (right arrow
button) to move the name into the Selected NARs list.
Tip To view the server details of the shared NARs you have selected to apply,
you can click either View IP NAR or View CLID/DNIS NAR, as
applicable.
Step 3 To define and apply a NAR, for this particular user, that permits or denies this user
access based on IP address, or IP address and port, follow these steps:
Tip You should define most NARs from within the Shared Components
section so that they can be applied to more than one group or user. For
more information, see Adding a Shared Network Access Restriction,
page 5-19.
a. In the Network Access Restrictions table, under Per User Defined Network
Access Restrictions, select the Define IP-based access restrictions check
box.
b. To specify whether the subsequent listing specifies permitted or denied IP
addresses, from the Table Defines list, select one of the following:
•Permitted Calling/Point of Access Locations
•Denied Calling/Point of Access Locations