Setting Cisco Ios/Pix Radius Parameters For A User - Cisco 2509 - Router - EN User Manual

Chapter 7 Setting Up and Managing User Accounts
Step 1
Step 2
Step 3

Setting Cisco IOS/PIX RADIUS Parameters for a User

Note
78-14696-01, Version 3.1
To configure IETF RADIUS attribute settings to be applied as an authorization
for the current user, follow these steps:
Perform Step 1 through Step 3 of
Result: The User Setup Edit page opens. The username being added or edited is
at the top of the page.
In the IETF RADIUS table, for each attribute that you need to authorize for the
current user, select the check box next to the attribute and then further define the
authorization for the attribute in the box or boxes next to it, as applicable.
Do one of the following:
If you are finished configuring the user account options, click Submit to
•
record the options.
To continue to specify the user account options, perform other procedures in
•
this chapter, as applicable.
The Cisco IOS RADIUS parameters appear only if all the following are true:
A AAA client has been configured to use RADIUS (Cisco IOS/PIX) in
•
Network Configuration.
The Per-user TACACS+/RADIUS Attributes check box is selected under
•
Advanced Options in the Interface Configuration section.
User-level RADIUS (Cisco IOS/PIX) attributes have been enabled under
•
RADIUS (Cisco IOS/PIX) in the Interface Configuration section.
To hide or display the Cisco IOS RADIUS VSA, see
Configuration Options for Non-IETF RADIUS Attributes, page
applied as an authorization to a particular user persists, even when you remove or
replace the associated AAA client; however, if you have no AAA clients of this
(vendor) type configured, the VSA settings do not appear in the user configuration
interface.
Advanced User Authentication Settings
Adding a Basic User Account, page
User Guide for Cisco Secure ACS for Windows Server
7-5.
Setting Protocol
3-16. A VSA
7-39