Chapter7 Se tting Up and Managing User Accounts
Basic User Setup Options
7-12
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
•Assigned by AAA client pool—Select this option and type the AAA client
IP pool name in the box, if this user is to have the IP address assigned by an
IP address pool configured on the AAA client.
•Assigned from AAA pool—Select this option and type the applicable pool
nam e in th e bo x, if t his us er i s to ha ve t he I P a ddr es s as sig ne d by an I P a ddr es s
pool configured on the AAA server. Select the AAA server IP pool name from
the Available Pools list, and then click —> (right arrow button) to move the
name into the Selected Pools list. If there is more than one pool in the
Selected Pools list, the users in this group are assigned to the first available
pool in the order listed. To move the position of a pool in the list, select the
pool name and click Up or Down until the pool is in the position you want.
Step 3 Do one of the following:
a. If you are finished configuring the user account options, click Submit to
record the options.
b. To continue to specify the user account options, perform other procedures in
this chapter, as applicable.
Setting Network Access Restrictions for a User
The Network Access Restrictions table in the Advanced Settings area of User
Setup enables you to apply NARs in three distinct ways:
•Apply existing shared NARs by name
•Define IP-based access restrictions to permit or deny user access to a
specified AAA client or to specified ports on a AAA client when an IP
connection has been established
•Define CLI/DNIS-based access restrictions to permit or deny user access
based on the CLI/DNIS used
Note You can also use the CLI/DNIS-based access restrictions area to
specify other values. For more information, see the “About Network
Access Restrictions” section on page 5-6.