Chapter6 Setting Up and Managing User Groups
Common User Group Settings
6-6
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Step 5 To save the group settings you have just made, click Submit.
For more information, see the “Saving Changes to User Group Settings” section
on page 6-50.
Step 6 To continue specifying other group settings, perform other procedures in this
chapter, as applicable.
Setting Callback Options for a User Group
Callback is a command string that is passed back to the access server. You can use
callback strings to initiate a modem to call the user back on a specific number for
added security or reversal of line charges. There are three options, as follows:
•No callback allowed—Disables callback for this group’s users. This is the
default setting.
•Dialup client specifies callback number—Allows the dialup client to
specify the callback number. The dialup client must support RFC 1570, PPP
LCP Extensions.
•Use Microsoft NT/2000 Callback settings (where possible)—Uses the
Microsoft WindowsNT/2000 callback settings. Note that, if a user’s
Windows account resides in a remote domain, the domain in which
Cisco Secure ACS resides must have a two-way trust with that domain for the
Microsoft NT/2000 callback settings to operate for that user.
To set callback options for a user group, follow these steps:
Step 1 In the navigation bar, click Group Setup.
Result: The Group Setup Select page opens.
Step 2 Select a group from the Group list, and then click Edit Settings.
Result: The Group Settings page displays the name of the group at its top.
Step 3 In the Callback table, select one of the following three options:
•No callback allowed
•Dialup client specifies callback number
•Use Microsoft NT/2000 Callback settings (where possible)