Cisco Systems Servers Manuale Utente

Pagina di 654
Chapter 6      Setting Up and Managing User Groups
Configuration-specific User Group Settings
6-26
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
The methods and functionality of Windows password aging differ according to 
whether you are using Windows NT or Windows 2000, and whether you employ 
Active Directory (AD) or Security Accounts Manager (SAM). Setting password 
aging for users in the Windows NT/2000 database is only one part of the larger 
task of setting security policies in Windows. For comprehensive information on 
Windows procedures, refer to your Windows NT/2000 system documentation.
Setting IP Address Assignment Method for a User Group
Perform this procedure to configure the way Cisco Secure ACS assigns IP 
addresses to the users in the group. The four possible methods are as follows:
No IP address assignment—No IP address is assigned to this group.
Assigned by dialup client—Use the IP address that is configured on the 
dialup client’s network settings for TCP/IP.
Assigned from AAA Client pool—The IP address is assigned by an IP 
address pool assigned on the AAA client.
Assigned from AAA server pool—The IP address is assigned by an IP 
address pool assigned on the AAA server. 
To set an IP address assignment method for a user group, follow these steps:
Step 1
In the navigation bar, click Group Setup.
Result: The Group Setup Select page opens.
Step 2
From the Group list, select a group, and then click Edit Settings.
Result: The Group Settings page displays the name of the group at its top. 
Step 3
From the Jump To list at the top of the page, choose IP Address Assignment.
Step 4
In the IP Assignment table, do one of the following:
a.
Select No IP address assignment.
b.
Select Assigned by dialup client.
c.
Select Assigned from AAA Client pool. Then, type the AAA client IP pool 
name.
d.
Select Assigned from AAA pool. Then, select the AAA server IP pool name 
in the Available Pools list and click —> (right arrow button) to move the 
name into the Selected Pools list.