Chapter6 Setting Up and Managing User Groups
Common User Group Settings
6-14
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Tip To support time-based quotas, we recommend enabling accounting update
packets on all AAA clients. If update packets are not enabled, the quota is
updated when the user logs off. If the AAA client through which the user is
accessing your network fails, the quota is not updated. In the case of multiple
sessions, such as with ISDN, the quota is not updated until all sessions
terminate, which means that a second channel will be accepted even if the first
channel has exhausted the user’s quota.
To set user usage quotas for a user group, follow these steps:
Step 1 In the navigation bar, click Group Setup.
Result: The Group Setup Select page opens.
Step 2 From the Group list, select a group, and then click Edit Settings.
Result: The Group Settings page displays the name of the group at its top.
Step 3 To define usage quotas based on duration of sessions, follow these steps:
a. In the Usage Quotas table, select the Limit User to x hours per time unit
check box.
b. Type the number of hours to which you want to limit group members in the
to x hours box.
Use decimal values to indicate minutes. For example, a value of 10.5 would
equal ten hours and 30 minutes.
c. Select the period for which the quota is effective from the following:
•per Day—From 12:01 a.m. until midnight
•per Week—From 12:01 a.m. Sunday until midnight Saturday
•per Month—From 12:01 a.m. on the first of the month until midnight on
the last day of the month
•Tota l—An ongoing count of hours, without an end
Step 4 To define user session quotas based on number of sessions, follow these steps:
a. In the Usage Quotas table, select the Limit each user of this group to x
sessions check box.
b. Type the number of sessions to which you want to limit users in the to x
sessions box.