Cisco Systems Servers Benutzerhandbuch

Seite von 654
5-15
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Chapter 5      Setting Up and Managing Shared Profile Components
Command Authorization Sets
Adding a Command Authorization Set
To add a command authorization set, follow these steps:
Step 1
In the navigation bar, click Shared Profile Components.
Result: The Shared Profile Components page lists the command authorization set 
types available. These always include Shell Command Authorization Sets and 
PIX Command Authorization Sets.
Step 2
Click one of the listed command authorization set types, as applicable. 
Result: The selected Command Authorization Sets table appears.
Step 3
Click Add.
Result: The applicable Command Authorization Set page appears.
Step 4
In the Name box, type a name for the command authorization set 
Note
The set name can contain up to 32 characters. Names cannot contain 
the following special characters:
 # ? " * > < 
Leading and trailing spaces are not allowed.
Step 5
In the Description box, type a description of the command authorization set.
Step 6
To specify how Cisco Secure ACS is to handle unmatched commands, select 
either the Permit or Deny option, as applicable.
Tip
The default setting is Deny.