Cisco Systems Servers Manuale Utente

Pagina di 654
Chapter 5      Setting Up and Managing Shared Profile Components
Downloadable PIX ACLs
5-4
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Note
The name of a PIX ACL may contain up to 32 characters. The name 
may contain spaces; but it may not contain leading, trailing, or 
multiple spaces, or the following characters: - [ ] / —
Step 5
In the Description: box, type a description of the new PIX ACL.
Step 6
In the ACL Definitions box, type the new PIX ACL definitions.
Note
In entering the ACL definitions in the ACS HTML interface, you do 
not use keyword and name entries; rather, you begin with a 
permit/deny keyword. For an example of the proper format of the ACL 
definitions, see the 
.
Step 7
When you have completed specifying the PIX ACL, click Submit.
Result: Cisco Secure ACS enters the new PIX ACL, which takes effect 
immediately. That is, it is available to be sent to any PIX Firewall that is 
attempting authentication of a user who has that ACL name as part of his or her 
user or group profile. For information on assigning a user or a group to a PIX 
ACL, see the 
 or the 
respectively.
Editing a Downloadable PIX ACL
To edit a downloadable PIX ACL, follow these steps:
Step 1
In the navigation bar, click Shared Profile Components.
Result: The Shared Profile Components page appears.
Step 2
Click Downloadable PIX ACLs.
Result: The Downloadable PIX ACLs table appears.