Configuring Tacacs+ Settings For A User - Cisco 2509 - Router - EN User Manual

Chapter 7 Setting Up and Managing User Accounts

Configuring TACACS+ Settings for a User

78-14696-01, Version 3.1
Configuring Device Management Command Authorization for a User,
•
page 7-30
Configuring the Unknown Service Setting for a User, page 7-32
•
You can use this procedure to configure TACACS+ settings at the user level for
the following service/protocols:
PPP IP
•
• PPP IPX
• PPP Multilink
PPP Apple Talk
•
• PPP VPDN
PPP LCP
•
ARAP
•
Shell (exec)
•
PIX Shell (pixShell)
•
• SLIP
You can also enable any new TACACS+ services that you may have configured.
Because having all service/protocol settings display within the User Setup section
would be cumbersome, you choose what settings to hide or display at the user
level when you configure the interface. For more information about setting up
new or existing TACACS+ services in the Cisco Secure ACS HTML interface,
see Protocol Configuration Options for TACACS+, page
If you have configured Cisco Secure ACS to interact with a Cisco
device-management application, new TACACS+ services may appear
automatically, as needed to support the device-management application. For more
information about Cisco Secure ACS interaction with device-management
applications, see Support for Cisco Device-Management Applications, page
For more information about attributes, see
Attribute-Value Pairs,"
assigning a PIX ACL, see
Appendix B, "TACACS+
or your AAA client documentation. For information on
Assigning a PIX ACL to a User, page
User Guide for Cisco Secure ACS for Windows Server
Advanced User Authentication Settings
3-7.
7-21.
1-18.
7-23