beautypg.com

Cisco 3.3 User Manual

Page 746

background image

Appendix D CSUtil Database Utility

User-Defined RADIUS Vendors and VSA Sets

D-30

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

Before You Begin

Define a custom RADIUS vendor and VSA set in a RADIUS vendor/VSA
import file. For more information, see

RADIUS Vendor/VSA Import File,

page D-34

.

Determine the RADIUS vendor slot to which you want to add the new
RADIUS vendor and VSAs. For more information, see

Listing Custom

RADIUS Vendors, page D-32

.

Make sure that regedit is not running. If regedit is running on the
Cisco Secure ACS Windows server, it can prevent Registry updates required
for adding a custom RADIUS vendor and VSA set.

To add a custom RADIUS VSA to Cisco Secure ACS, follow these steps:

Step 1

On the computer running Cisco Secure ACS, open an MS DOS command prompt
and change directories to the directory containing CSUtil.exe. For more
information about the location of CSUtil.exe, see

Location of CSUtil.exe and

Related Files, page D-2

.

Step 2

Type:

CSUtil.exe -addUDV

slot-number

filename

where slot-number is an unused Cisco Secure ACS RADIUS vendor slot and
filename is the name of a RADIUS vendor/VSA import file. The filename can
include a relative or absolute path to the RADIUS vendor/VSA import file. Press
Enter.

For example, to add the RADIUS vendor defined in

d:\acs\myvsa.ini

to slot 5,

the command would be:

CSUtil.exe -addUDV 5 d:\acs\myvsa.ini

CSUtil.exe displays a confirmation prompt.

Step 3

To confirm that you want to add the RADIUS vendor and halt all Cisco Secure
ACS services during the process, type Y and press Enter.

CSUtil.exe halts Cisco Secure ACS services, parses the vendor/VSA input file,
and adds the new RADIUS vendor and VSAs to Cisco Secure ACS. This process
may take a few minutes. After it is complete, CSUtil.exe restarts Cisco Secure
ACS services.