Setting Custom Radius Attributes For A User - Cisco 2509 - Router - EN User Manual

Advanced User Authentication Settings
Step 4

Setting Custom RADIUS Attributes for a User

Step 1
Step 2
User Guide for Cisco Secure ACS for Windows Server
7-52
For more information about attributes, see
Attributes," or your AAA client documentation.
Do one of the following:
If you are finished configuring the user account options, click Submit to
•
record the options.
To continue to specify the user account options, perform other procedures in
•
this chapter, as applicable.
Custom RADIUS parameters appear only if all the following are true:
You have defined and configured the custom RADIUS VSAs. (For
•
information about creating user-defined RADIUS VSAs, see
RADIUS Vendors and VSAs, page
• A AAA client has been configured in Network Configuration that uses a
RADIUS protocol that supports the custom VSA.
The Per-user TACACS+/RADIUS Attributes check box is selected under
•
Advanced Options in the Interface Configuration section.
User-level RADIUS (custom name) attributes you want to apply have been
•
enabled under RADIUS (custom name) in the Interface Configuration
section.
You must configure both the IETF RADIUS and the custom RADIUS attributes.
Proprietary attributes override IETF attributes.
To configure and enable custom RADIUS attributes to be applied as an
authorization for the current user, follow these steps:
Perform Step 1 through Step 3 of
Result: The User Setup Edit page opens. The username being added or edited is
at the top of the page.
Before configuring custom RADIUS attributes, be sure your IETF RADIUS
attributes are configured properly. For more information about setting IETF
RADIUS attributes, see
Chapter 7
8-33.)
Adding a Basic User Account, page
Setting IETF RADIUS Parameters for a User, page
Setting Up and Managing User Accounts
Appendix C, "RADIUS
Custom
78-14696-01, Version 3.1
7-5.
7-38.