User - Cisco 2509 - Router - EN User Manual

Chapter 7 Setting Up and Managing User Accounts
Setting Cisco VPN 5000 Concentrator RADIUS Parameters for a User
Note
Step 1
Step 2
78-14696-01, Version 3.1
The Cisco VPN 5000 Concentrator RADIUS attribute configurations display only
if all the following are true:
• A AAA client has been configured to use RADIUS (Cisco VPN 5000) in
Network Configuration.
• The Per-user TACACS+/RADIUS Attributes check box is selected under
Advanced Options in the Interface Configuration section.
• User-level RADIUS (Cisco VPN 5000) attributes you want to apply have
been enabled under RADIUS (Cisco VPN 5000) in the Interface
Configuration section.
Cisco VPN 5000 Concentrator RADIUS represents only the Cisco VPN 5000
Concentrator VSA. You must configure both the IETF RADIUS and Cisco VPN
5000 Concentrator RADIUS attributes.
To hide or display Cisco VPN 5000 Concentrator RADIUS attributes, see
Protocol Configuration Options for Non-IETF RADIUS Attributes, page
VSA applied as an authorization to a particular user persists, even when you
remove or replace the associated AAA client; however, if you have no AAA
clients of this (vendor) type configured, the VSA settings do not appear in the user
configuration interface.
To configure and enable Cisco VPN 5000 Concentrator RADIUS attributes to be
applied as an authorization for the current user, follow these steps:
Perform Step 1 through Step 3 of
Result: The User Setup Edit page opens. The username being added or edited is
at the top of the page.
Before configuring Cisco VPN 5000 Concentrator RADIUS attributes, be sure
your IETF RADIUS attributes are configured properly. For more information
about setting IETF RADIUS attributes, see
a User, page 7-38.
Advanced User Authentication Settings
Adding a Basic User Account, page
Setting IETF RADIUS Parameters for
User Guide for Cisco Secure ACS for Windows Server
Setting
3-16. A
7-5.
7-45