Chapter 7 Setting Up and Managing User Accounts
Basic User Setup Options
7-4
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Basic User Setup Options
This section presents the basic activities you perform when configuring a new
user. At its most basic level, configuring a new user requires only three steps, as
follows:
• Specify a name.
• Specify either a method for remote password authentication or, for
authentication via the CiscoSecure user database, a password.
• Submit the information.
For detailed procedural information, see Adding a Basic User Account, page 7-5.
What other procedures you perform when setting up new user accounts is a
function both of the complexity of your network and of the granularity of control
you desire. The other basic procedures detailed in this section include the
following:
• Setting Supplementary User Information, page 7-7
• Setting a Separate CHAP/MS-CHAP/ARAP Password, page 7-8
• Assigning a User to a Group, page 7-9
• Setting User Callback Option, page 7-10
• Assigning a User to a Client IP Address, page 7-11
• Setting Network Access Restrictions for a User, page 7-12
• Setting Max Sessions Options for a User, page 7-16
• Setting User Usage Quotas Options, page 7-18
• Setting Options for User Account Disablement, page 7-20
• Assigning a PIX ACL to a User, page 7-21
Beyond these basic user setup options, there are also procedures for configuring
a user account for authentication via TACACS+ and RADIUS; these procedures
are located in Advanced User Authentication Settings, page 7-22.
Note The steps for editing user account settings are essentially identical to those used
when adding a user account but, to edit, you navigate directly to the field or fields
to be changed. You cannot edit the name associated with a user account; to change
a username you must delete the user account and establish another.