5-9
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Chapter5 Setting Up and Managing Shared Profile Components Network Access Restrictions
c. Select or type the applicable information in each of the following boxes:
•AAA Client—Select All AAA clients, or the name of the network device
group (NDG), or the individual AAA client, to which access is permitted
or denied.
•Port—Type the number of the port to which to permit or deny access.
You can use the wildcard asterisk (*) to permit or deny access to all ports
on the selected AAA client.
•Src IP Address—Type the IP address to filter on when performing
access restrictions. You can type multiple entries separated by a comma
or use the wildcard asterisk (*) to specify all IP addresses.
d. Click enter.
Result: The AAA client, port, and address information appears as a line item
in the table.
e. To enter additional IP-based line items, repeat Steps c and d.
Step 7 To permit or deny access based on calling location or values other than an
established IP address, follow these steps:
a. Select the Define CLI/DNIS based access restrictions check box.
b. To specify whether you are listing addresses that are permitted or denied,
from the Table Defines list, select the applicable value.
c. To specify the applicability of this NAR, from the AAA Client list, select one
of the following values:
•The name of the NDG
•The name of the particular AAA client
•All AAA clients
Tip Only NDGs that you have previously configured appear in the list.