Cisco 3.3 - Manual (Page 158)

Chapter 5 Shared Profile Components
Network Access Filters
5-4
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Step 3 Click Add.
The Network Access Filtering edit page appears.
Step 4 In the Name box, type the name of the new network access filter.
Note The name of a NAF can contain up to 31 characters. Spaces are not
allowed. Names cannot contain the following 10 characters:
[ ] , / — - “ ‘ > <
Step 5 In the Description box, type a description of the new network access filter.
Step 6 Add network elements to the NAF definition as applicable:
a. To include an NDG in the NAF definition, from the Network Device Groups
box, select the NDG; then click --> (right arrow button) to move it to the
Selected Items box.
b. To include a AAA client in the NAF definition, from the Network Device
Groups box select the applicable NDG and then, from the Network Devices
box, select the AAA client you want to include. Finally, click --> (right arrow
button) to move it to the Selected Items box.
Tip If you are using NDGs the AAA clients appear in the Network Devices
box only when you have selected the NDG to which they belong.
Otherwise, if you are not using NDGs, you can select the AAA client from
the Network Devices box with no prior NDG selection.
c. To include an IP address in the NAF definition, type the IP address in the IP
Address box. Click --> (right arrow button) to move it to the Selected Items
box.
Note You can use the wildcard (*) to designate a range within an IP
address.
Step 7 Ensure that the order of the items is what you want. To change the order of items,
in the Selected Items box, click the name of an item and then click Up or Down
to move it to the position you want.