Active Directory, for example. To configure groups and vendor-specific attributes, complete these steps:

1.Click Group Setup on the Cisco Secure ACS Main Menu.

2.Choose any unused groups, and rename each group as applicable. In the example here, we have renamed Group 2 as Sales and Group 3 as Engineering.

Figure 7-21 Group Setup

Note: Only the group names need to be defined. Once the RADIUS Authorization Components have been configured, they will be bound to the groups created here based on authentication and posture validation. This is where the VLAN assignments and RADIUS attributes for the groups are defined.

3. Click Submit + Restart after completing the group configuration.

238Building a Network Access Control Solution with IBM Tivoli and Cisco Systems

Page 256
Image 256
IBM Tivoli and Cisco manual Group Setup