Cisco Servers - TACACS+ AV Pairs

Appendix C TACACS+ Attribute-Value Pairs
Cisco IOS Attribute-Value Pair Dictionary
C-2
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
TACACS+ AV Pairs
Note Beginning with Cisco Secure ACS 2.3, some TACACS+ attributes no longer
appear on the Group Setup page. This is because IP pools and callback
supersede the following attributes:
addr
addr-pool
callback-dialstring
Additionally, these attributes cannot be set via database synchronization, and
ip:addr=n.n.n.n is not allowed as a Cisco vendor-specific attribute (VSA).
Cisco Secure ACS supports many TACACS+ AV pairs. For descriptions of these
attributes, refer to Cisco IOS documentation for the release of Cisco IOS running
on your AAA clients. TACACS+ AV Pairs supported in Cisco Secure ACS are as
follows:
• acl=
• addr=
• addr-pool=
• autocmd=
• callback-dialstring
• callback-line
• callback-rotary
• cmd-arg=
• cmd=
• dns-servers=
• gw-password
• idletime=
• inacl#n
• inacl=
• interface-config=