Chapter3 Settin g Up the CiscoSecure ACS HTML Interface
Advanced Options
3-4
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version. 3.0
Advanced Options
This feature enables you to determine which advanced features
Cisco Secure ACS displays. You can simplify the pages displayed in other areas
of the Cisco Secure ACS HTML interface by hiding advanced features that you
do not use. Many of these options do not appear if they are not enabled.
Caution Disabling an advanced option in the Interface Configuration section does not
affect anything except the display of that function in the CSACS HTML
interface. Settings made while an advanced option was active (selected)
remain in effect when that advanced option is no longer displayed in the
interface (de-selected). Further, the interface displays any advanced option
that is enabled or has non-default values, even if you have configured that
advanced option to be hidden. If you later disable the option or delete its value,
Cisco Secure ACS hides the advanced option.
The advanced option features include the following:
•Per-User TACACS+/RADIUS Attributes—When selected, this feature
enables TACACS+/RADIUS attribut es to be set at a per-user lev el, in addition
to being set at the group level.
•User-Level Network Access Restriction Sets—When selected, this feature
enables the Shared Profile Component network access restrictions (NARs)
options on the User Setup page. These options allow you to apply previously
configured, named, IP-based and CLID/DNIS-based NARs at the user level.
For information on defining a NAR, or NAR set, within Shared Profile
Components, see the “Shared Network Access Restrictions Configuration”
section on page 5-7.
•User-Level Network Access Restrictions—When selected, this feature
enables the two sets of options for defining user-level, IP-based and
CLI/DNIS-based NARs on the User Setup page.
•User-Level Downloadable ACLs—When selected, this feature enables the
Downloadable ACLs section on the User Setup page.
•Default Time-of-Day/Day-of-Week Specification—When selected, this
feature enables the default time-of-day/day-of-week access settings grid on
the Group Setup page.