Chapter 1
Overview of Cisco Secure ACS
Other Authorization-Related Features
78-14696-01, Version 3.1
application and apply those sets to user groups that contain network
administrators or to individual users who are network administrators. For
information about configuring a command-authorization set, see
Authorization Sets Configuration, page
shared device command-authorization set to a user group, see
Device-Management Command Authorization for a User Group, page
information about applying a shared device command-authorization set to a user,
see
Configuring Device Management Command Authorization for a User,
page
7-30.
In addition to the authorization-related features discussed in this section, the
following features are provided by Cisco Secure ACS:
Group administration of users, with support for up to 500 groups (see
•
Chapter 6, "Setting Up and Managing User
Ability to map a user from an external user database to a specific
•
Cisco Secure ACS group (see
Ability to disable an account after a number of failed attempts, specified by
•
the administrator (see
page
7-20).
Ability to disable an account on a specific date (see
•
Account Disablement, page
Ability to restrict time-of-day and day-of-week access (see
•
Time-of-Day Access for a User Group, page
Ability to restrict network access based on remote address caller line
•
identification (CLID) and dialed number identification service (DNIS) (see
Setting Network Access Restrictions for a User Group, page
•
IP Pools for IP address assignment of end-user client hosts (see
Address Assignment Method for a User Group, page
•
Per-user and per-group TACACS+ or RADIUS attributes (see
Options, page
3-4).
•
Support for Voice over IP (VoIP), including configurable logging of
accounting data (see
5-16. For information about applying a
Database Group Mappings, page
Setting Options for User Account Disablement,
7-20).
Enabling VoIP Support for a User Group, page
User Guide for Cisco Secure ACS for Windows Server
AAA Server Functions and Concepts
Command
Configuring
Groups").
12-11).
Setting Options for User
Setting Default
6-5).
6-7).
Setting IP
6-27).
Advanced
6-35. For
6-4).
1-19