Cisco Systems CSACS3415K9 Manual De Usuario
10-15
User Guide for Cisco Secure Access Control System 5.4
OL-26225-01
Chapter 10 Managing Access Policies
Configuring Access Services
Step 3
Click Next to configure the allowed protocols. See
Related Topic
•
•
Edit
To edit the listed RADIUS attribute, select the attribute in the list and click Edit. The attribute
properties appear in the fields. Modify the properties as required, then click Replace.
properties appear in the fields. Modify the properties as required, then click Replace.
Replace
Click Replace to replace the selected RADIUS attribute with the one that is currently defined in
the RADIUS fields.
the RADIUS fields.
Delete
Click Delete to delete the selected RADIUS attribute from the list.
Dictionary Type
Choose the dictionary that contains the RADIUS attribute you want to use.
RADIUS Attribute
Name of the RADIUS attribute. Click Select to choose a RADIUS attribute from the specified
dictionary.
dictionary.
Attribute Type
Type of the selected RADIUS attribute. Client vendor type of the attribute, from which ACS
allows access requests. For a description of the attribute types, refer to Cisco IOS documentation
for the Cisco IOS Software release that is running on your AAA clients.
allows access requests. For a description of the attribute types, refer to Cisco IOS documentation
for the Cisco IOS Software release that is running on your AAA clients.
Operation
You can perform the following three operations:
•
Choose ADD to add a new attribute value for the selected RADIUS attribute:
–
If Multiple not allowed—adds the new value for the selected attribute only if this
attribute does not exists on the request.
attribute does not exists on the request.
–
If Multiple allowed—always adds the attribute with a new value.
•
Choose UPDATE to update the existing value of a selected RADIUS attribute:
–
If Multiple not allowed—updates the attribute value with the new value if the attribute
exists on the request.
exists on the request.
–
If Multiple allowed—removes all occurrences of this attribute and adds one attribute
with the new value.
with the new value.
–
If the attribute is a cisco-avpair (pair of key=value), the update is done according to the
key.
key.
•
Choose DELETE to delete the value of the selected RADIUS attribute.
The attribute operations statements are ordered. The administrator can change the statement’s
order at the time of configuration. ACS performs the operation on the attributes according to the
configured order. For more information on this, see
order at the time of configuration. ACS performs the operation on the attributes according to the
configured order. For more information on this, see
.
Attribute New Value
Enter a new value for the selected RADIUS attribute. This option is not available if you choose
the delete operation.
the delete operation.
Table 10-6
Access Service Properties—General Page (continued)
Option
Description