Cisco 2509 - Router - EN User Manual

12-23
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 12 Administering External User Databases
Database Group Mappings
• Safeword token server
• ActivCard token server
• Vasco token server
• RADIUS token server
Cisco Secure ACS supports per-user group mapping for users authenticated with
a LEAP Proxy RADIUS Server database. This is provided in addition to the
default group mapping described in Group Mapping by External User Database,
page 12-12.
To enable per-user group mapping, configure the external user database to return
authentication responses that contain the Cisco IOS/PIX RADIUS attribute 1,
[009\001] cisco-av-pair with the following value:
ACS:CiscoSecure-Group-Id = N
where N is the Cisco Secure ACS group number (0 through 499) to which
Cisco Secure ACS should assign the user. For example, if the LEAP Proxy
RADIUS Server authenticated a user and included the following value for the
Cisco IOS/PIX RADIUS attribute 1, [009\001] cisco-av-pair:
ACS:CiscoSecure-Group-Id = 37
Cisco Secure ACS assigns the user to group 37 and applies authorization
associated with group 37.

Cisco 2509 - Router - EN Specifications

General

Brand	Cisco
Model	2509 - Router - EN
Category	Software
Language	English