Cisco 2509 - Router - EN User Manual page 261

Chapter 7 Setting Up and Managing User Accounts
Microsoft RADIUS represents only the Microsoft VSA. You must configure both
the IETF RADIUS and Microsoft RADIUS attributes.
To hide or display Microsoft RADIUS attributes, see
Note
Configuration Options for Non-IETF RADIUS Attributes, page
applied as an authorization to a particular user persists, even when you remove or
replace the associated AAA client; however, if you have no AAA clients of this
(vendor) type configured, the VSA settings do not appear in the user configuration
interface.
To configure and enable Microsoft RADIUS attributes to be applied as an
authorization for the current user, follow these steps:
Step 1 Perform Step 1 through Step 3 of
Result: The User Setup Edit page opens. The username being added or edited is
at the top of the page.
Step 2 Before configuring Cisco IOS RADIUS attributes, be sure your IETF RADIUS
attributes are configured properly. For more information about setting IETF
RADIUS attributes, see
In the Microsoft RADIUS Attributes table, to specify the attributes that should be
Step 3
authorized for the user, follow these steps:
a.
b.
c.
78-14696-01, Version 3.1
Setting IETF RADIUS Parameters for a User, page
Select the check box next to the particular attribute.
Further define the authorization for that attribute in the box next to it.
Continue to select and define attributes, as applicable.
For more information about attributes, see
Attributes," or your AAA client documentation.
The MS-CHAP-MPPE-Keys attribute value is autogenerated by
Note
Cisco Secure ACS; there is no value to set in the HTML interface.
User Guide for Cisco Secure ACS for Windows Server
Advanced User Authentication Settings
Setting Protocol
Adding a Basic User Account, page
Appendix C, "RADIUS
3-16. A VSA
7-5.
7-38.
7-47