Cisco 2509 - Router - EN User Manual page 204

Configuration-specific User Group Settings
remove or replace the associated AAA client; however, if you have no AAA
clients of this (vendor) type configured, the VSA settings do not appear in the
group configuration interface.
To configure and enable Cisco VPN 5000 Concentrator RADIUS attributes to be
applied as an authorization for each user in the current group, follow these steps:
Confirm that your IETF RADIUS attributes are configured properly.
Step 1
For more information about setting IETF RADIUS attributes, see
IETF RADIUS Settings for a User Group, page
Step 2 In the navigation bar, click Group Setup.
Result: The Group Setup Select page opens.
From the Group list, select a group, and then click Edit Settings.
Step 3
Result: The Group Settings page displays the name of the group at its top.
From the Jump To list at the top of the page, choose RADIUS (Cisco VPN 5000).
Step 4
In the Cisco VPN 5000 Concentrator RADIUS Attributes table, select the
Step 5
attributes that should be authorized for the group by selecting the check box next
to the attribute. Further define the authorization for each attribute in the field next
to it.
For more information about attributes, see
the documentation for network devices using RADIUS.
To save the group settings you have just made, click Submit.
Step 6
For more information, see
To continue specifying other group settings, perform other procedures in this
Step 7
chapter, as applicable.
User Guide for Cisco Secure ACS for Windows Server
6-44
Chapter 6
6-37.
Appendix C, "RADIUS Attributes,"
Saving Changes to User Group Settings, page
Setting Up and Managing User Groups
Configuring
78-14696-01, Version 3.1
or
6-53.