beautypg.com

Cisco 3.3 User Manual

Page 176

background image

Chapter 5 Shared Profile Components

Network Access Restrictions

5-22

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

d.

To specify the information that this NAR should filter on, type values in the
following boxes, as applicable:

Tip

You can type an asterisk (*) as a wildcard to specify “all” as a value.

Port—Type the number of the port to filter on.

CLI—Type the CLI number to filter on. You can also use this box to
restrict access based on values other than CLIs, such as an IP address or
MAC address; for information, see

About Network Access Restrictions,

page 5-15

.

DNIS—Type the number being dialed into to filter on.

Note

The total number of characters in the AAA Client list and the Port,
CLI, and DNIS boxes must not exceed 1024. Although Cisco Secure
ACS accepts more than 1024 characters when you add a NAR, you
cannot edit the NAR and Cisco Secure ACS cannot accurately apply
it to users.

e.

Click enter.

The information specifying the NAR line item appears in the table.

f.

To enter additional non-IP-based NAR line items, repeat

c.

through

e.

.

Step 8

To save the shared NAR definition, click Submit.

Cisco Secure ACS saves the shared NAR and lists it in the Network Access
Restrictions table.