ACS Applianc e4.0 User level AAA client Access

rkumares · ‎04-29-2007

I have defined Network Device Group say ?Access.? where multiple AAA clients are grouped .

Ex:NDG is Access ?> All the Access devices are added as AAA Clients.Currenlty multiple users who belongs to ACCESS( Group name) are accessing all the AAA Clients..

Now If I want user ?A? to access only few of the AAA clients in the Access group.Is there any possibility of the same can be achieved??.

Note: I can?t add AAA client separately while its already associated to NDG.ie AAA client can be part of only one Group at any time..

royalblues · ‎04-29-2007

You can create another group and add these users to it.

Then go to group setup.

Under Network Access Restrictions (NAR)

use the Per Group Defined Network Access Restrictions and permit only the devices they should be able to access.

HTH, rate if it does

Narayan

rkumares · ‎04-29-2007

Hi,

Thanks for your response..

Creating another group for these users are not an issue..Since all the AAA clients are part of NDG, I willnot be able to pull out few AAA clients and associate to the new group. I have to see, If there is an option to permit individual aaa clients( all my aaa clinets are part of NDG).I will try with NAR and update here.

Thanks,

rkumares