Tacacs+ av pairs – Cisco 3.3 User Manual
Page 668

Appendix B TACACS+ Attribute-Value Pairs
Cisco IOS AV Pair Dictionary
B-2
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
TACACS+ AV Pairs
Note
Beginning with Cisco Secure ACS 2.3, some TACACS+ attributes no longer
appear on the Group Setup page. This is because IP pools and callback supersede
the following attributes:
addr
addr-pool
callback-dialstring
Additionally, these attributes cannot be set via database synchronization, and
ip:addr=n.n.n.n is not allowed as a Cisco vendor-specific attribute (VSA).
Cisco Secure ACS supports many TACACS+ AV pairs. For descriptions of these
attributes, refer to Cisco IOS documentation for the release of Cisco IOS running
on your AAA clients. TACACS+ AV pairs supported in Cisco Secure ACS are as
follows:
•
acl=
•
addr=
•
addr-pool=
•
autocmd=
•
callback-dialstring
•
callback-line
•
callback-rotary
•
cmd-arg=
•
cmd=
•
dns-servers=
•
gw-password
•
idletime=
•
inacl#n
•
inacl=
•
interface-config=