Cisco Acs 57 User Guide

11   
Managing System Administration Configurations
Managing Dictionaries
4.Click Submit to save the subattribute.
Table 11 Creating, Duplicating, and Editing RADIUS Subattributes
Option Description
General
Attribute Name of the subattribute. The name must be unique.
Description (Optional) A brief description of the subattribute.
RADIUS Configuration
Vendor Attribute ID Enter the vendor ID field for the subattribute. This value must be unique for this vendor.
Direction Specifies where the attribute is in...

12
Managing System Administration Configurations
 
Managing Dictionaries
Viewing RADIUS Vendor-Specific Subattributes
To view the attributes that are supported by a particular RADIUS vendor:
1.Choose System Administration > Configuration > Dictionaries > Protocols > RADIUS > RADIUS VSA.
The RADIUS VSA page appears.
2.Check the check box the vendor whose attribute you want to view, then click Show Vendor Attributes.
The vendor-specific attributes and the fields listed in Table 8 on page 6 are displayed....

13   
Managing System Administration Configurations
Managing Dictionaries
The internal user attribute configuration is saved. The Attributes list for the Internal Users page appears with the new 
attribute configuration.
Related Topics
Deleting an Internal User Identity Attribute, page 14
Creating, Duplicating, and Editing an Internal Host Identity Attribute, page 15
Policies and Identity Attributes, page 16
Configuring Internal Identity Attributes
Table 12 on page 13 describes the fields in the...

14
Managing System Administration Configurations
 
Managing Dictionaries
Deleting an Internal User Identity Attribute
To delete an internal user identity attribute:
1.Select System Administration > Configuration > Dictionaries > Identity > Internal Users.
The Attributes list for the internal user page appears.
2.Check the check box the attribute you want to delete. 
Because deleting an identity attribute can take a long time to process, you can delete only one attribute at a time. 
3.Click Delete. 
4.For...

15   
Managing System Administration Configurations
Managing Dictionaries
The Attributes list for the internal user page appears without the deleted attribute.
Related Topics
Creating, Duplicating, and Editing an Internal User Identity Attribute, page 12
Policies and Identity Attributes, page 16
Creating, Duplicating, and Editing an Internal Host Identity Attribute
To create, duplicate, and edit an internal host identity attribute:
1.Select System Administration > Configuration > Dictionaries >...

16
Managing System Administration Configurations
 
Configuring Local Server Certificates
The Attributes list for the Internal Hosts page appears without the deleted attribute.
Related Topics
Creating, Duplicating, and Editing an Internal Host Identity Attribute, page 15
Policies and Identity Attributes, page 16
Adding Static IP address to Users in Internal Identity Store
To add static IP address to a user in Internal Identity Store:
1.Add a static IP attribute to internal user attribute dictionary:...

17   
Managing System Administration Configurations
Configuring Local Server Certificates
Adding Local Server Certificates
You can add a local server certificate, also known as an ACS server certificate, to identify the ACS server to clients.
1.Select System Administration > Configuration > Local Server Certificates > Local Certificates. 
The Local Certificates page appears displaying the information in Table 13 on page 17:
2.Click Add.
3.Enter the information in the Local Certificate Store Properties...

18
Managing System Administration Configurations
 
Configuring Local Server Certificates
4.Click Finish.
The new certificate is saved. The Local Certificate Store page appears with the new certificate.
Generating Self-Signed Certificates
1.Select System Administration > Configurations > Local Server Certificates > Local Certificates > Add.
2.Select Generate Self Signed Certificate> Next. 
3.Enter the information in the ACS Import Server Certificate as described in Table 16 on page 19:
Table 15 Import...

19   
Managing System Administration Configurations
Configuring Local Server Certificates
4.Click Finish.
The new certificate is saved. The Local Certificate Store page appears with the new certificate.
Generating a Certificate Signing Request
1.Select System Administration > Configurations > Local Server Certificates > Local Certificates > Add.
2.Select Generate Certificate Signing Request > Next. 
3.Enter the information in the ACS Import Server Certificate as described in Table 17 on page 19:
4.Click...

20
Managing System Administration Configurations
 
Configuring Local Server Certificates
The new certificate is saved. The Local Certificate Store page appears with the new certificate.
Binding CA Signed Certificates
Use this page to bind a CA signed certificate to the request that was used to obtain the certificate from the CA.
1.Select System Administration > Configurations > Local Server Certificates > Local Certificates > Add.
2.Select Bind CA Signed Certificate > Next. 
3.Enter the information in...