10-15
User Guide for Cisco Secure Access Control System 5.4
OL-26225-01
Chapter10 Managing Access Poli cies
Configuring Access Services
Step3 Click Next to configure the allowed protocols. See Configuring Access Service Allowed Protocols,
page 10-16.
Related Topic
•Configuring Access Service Allowed Protocols, page 10-16
•Configuring Access Services Templates, page10-20
Edit To edit the listed RADIUS attribute, select the attribute in the list and click Edit. The attribute
properties appear in the fields. Modify the properties as required, then click Replace.
Replace Click Replace to replace the selected RADIUS attribute with the one that is currently defined in
the RADIUS fields.
Delete Click Delete to delete the selected RADIUS attribute from the list.
Dictionary Type Choose the dictionary that contains the RADIUS attribute you want to use.
RADIUS Attribute Name of the RADIUS attribute. Click Select to choose a RADIUS attribute from the specified
dictionary.
Attribute Type Type of the selected RADIUS attribute. Client vendor type of the attribute, from which ACS
allows access requests. For a description of the attribute types, refer to Cisco IOS documentation
for the Cisco IOS Software release that is running on your AAA clients.
Operation You can perform the following three operations:
•Choose ADD to add a new attribute value for the selected RADIUS attribute:
–
If Multiple not allowed—adds the new value for the selected attribute only if this
attribute does not exists on the request.
–
If Multiple allowed—always adds the attribute with a new value.
•Choose UPDATE to update the existing value of a selected RADIUS attribute:
–
If Multiple not allowed—updates the attribute value with the new value if the attribute
exists on the request.
–
If Multiple allowed—removes all occurrences of this attribute and adds one attribute
with the new value.
–
If the attribute is a cisco-avpair (pair of key=value), the update is done according to the
key.
•Choose DELETE to delete the value of the selected RADIUS attribute.
The attribute operations statements are ordered. The administrator can change the statement’s
order at the time of configuration. ACS performs the operation on the attributes accordi ng to the
configured order. For more information on this, see RADIUS Attribute Rewrite Operation,
page A-9.
Attribute New Value Enter a new value for the selected RADIUS attribute. This option is not available if you choose
the delete operation.
Table10-6 Access Service Properties—General Page (continued)
Option Description