Cisco Systems Servers Benutzerhandbuch

You can use this feature to send many TACACS+ commands to the 
access device for the service, provided that the device supports the 
command, and that the command syntax is correct. This feature is 
disabled by default, but you can enable it the same way you enable 
attributes and time-of-day access.

Display enable Default (Undefined) Service Configuration—If this 
check box is selected, an area appears on the User Setup and Group Setup 
pages that enables you to permit unknown TACACS+ services, such as 
CDP.

This option should be used by advanced system administrators 
only.

Customized settings at the user level take precedence over settings at the 
group level.

This procedure enables you to display or hide TACACS+ administrative and 
accounting options. It is unlikely that you will use every service and protocol 
available for TACACS+. Displaying each would make setting up a user or group 
cumbersome. To simplify setup, you can use the TACACS+ (Cisco IOS) Edit 
page to customize the services and protocols that appear.

To configure the user interface for TACACS+ options, follow these steps:

The Cisco Secure ACS HTML interface displays any protocol option that is 
enabled or has non-default values, even if you have configured that protocol 
option to be hidden. This behavior prevents Cisco Secure ACS from hiding 
active settings. If you later disable the option or delete its value, 
Cisco Secure ACS hides the protocol option.

Click Interface Configuration.

Click TACACS+ (Cisco IOS).