Cisco Systems Servers Benutzerhandbuch

Seite von 654
7-17
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Chapter 7      Setting Up and Managing User Accounts
Basic User Setup Options
Step 5
Do one of the following:
a.
If you are finished configuring the user account options, click Submit to 
record the options.
b.
To continue to specify the user account options, perform other procedures in 
this chapter, as applicable.
Setting Max Sessions Options for a User
The Max Sessions feature enables you to set the maximum number of 
simultaneous connections permitted for this user. For Cisco Secure ACS 
purposes, a session is considered any type of user connection supported by 
RADIUS or TACACS+, for example PPP, or Telnet, or ARAP. Note, however, that 
accounting must be enabled on the AAA client for Cisco Secure ACS to be aware 
of a session. All session counts are based on user and group names only. 
Cisco Secure ACS does not support any differentiation by type of session—all 
sessions are counted as the same. To illustrate, a user with a Max Session count 
of 1 who is dialed in to a AAA client with a PPP session will be refused a 
connection if that user then tries to Telnet to a location whose access is controlled 
by the same ACS.
Note
Each Cisco Secure ACS server holds its own Max Sessions counts. There is no 
mechanism for Cisco Secure ACS to share Max Sessions counts across 
multiple servers. Therefore, if two Cisco Secure ACS servers are set up as a 
mirror pair with the workload distributed between them, they will have 
completely independent views of the Max Sessions totals.
Tip
If the Max Sessions table does not appear, click Interface Configuration
click Advanced Options. Then select the Max Sessions check box.