Cisco Systems 3.3 Server User Manual


 
Chapter6 User Group Management
Basic User Group Settings
6-14
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Step 6 To continue specifying other group settings, perform other procedures in this
chapter, as applicable.
Setting Usage Quotas for a User Group
Note If this feature does not appear, click Interface Configuration, click Advanced
Options, and then select the Usage Quotas check box.
Perform this procedure to define usage quotas for members of a group. Session
quotas affect each user of a group individually, not the group collectively. You can
set quotas for a given period in two ways:
By total duration of session
By the total number of sessions
If you make no selections in the Usage Quotas section for a group, no usage
quotas are enforced on users assigned to that group, unless you configure usage
quotas for the individual users.
Note The Usage Quotas section on the Group Settings page does not show usage
statistics.
Usage statistics are available only on the settings page for an individual user. For
more information, see Setting User Usage Quotas Options, page 7-18.
When a user exceeds his or her assigned quota, Cisco Secure ACS denies that user
access upon attempting to start a session. If a quota is exceeded during a session,
Cisco Secure ACS allows the session to continue.
You can reset the usage quota counters for all users of a group from the Group
Settings page. For more information about resetting usage quota counters for a
whole group, see Resetting Usage Quota Counters for a User Group, page 6-55.
Tip To support time-based quotas, we recommend enabling accounting update packets
on all AAA clients. If update packets are not enabled, the quota is updated when
the user logs off. If the AAA client through which the user is accessing your