Cisco Systems 3.3 Server User Manual


 
Appendix D CSUtil Database Utility
User-Defined RADIUS Vendors and VSA Sets
D-30
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Before You Begin
Define a custom RADIUS vendor and VSA set in a RADIUS vendor/VSA
import file. For more information, see RADIUS Vendor/VSA Import File,
page D-34.
Determine the RADIUS vendor slot to which you want to add the new
RADIUS vendor and VSAs. For more information, see Listing Custom
RADIUS Vendors, page D-32.
Make sure that regedit is not running. If regedit is running on the
Cisco Secure ACS Windows server, it can prevent Registry updates required
for adding a custom RADIUS vendor and VSA set.
To add a custom RADIUS VSA to Cisco Secure ACS, follow these steps:
Step 1 On the computer running Cisco Secure ACS, open an MS DOS command prompt
and change directories to the directory containing CSUtil.exe. For more
information about the location of CSUtil.exe, see Location of CSUtil.exe and
Related Files, page D-2.
Step 2 Type:
CSUtil.exe -addUDV slot-number
filename
where slot-number is an unused Cisco Secure ACS RADIUS vendor slot and
filename is the name of a RADIUS vendor/VSA import file. The filename can
include a relative or absolute path to the RADIUS vendor/VSA import file. Press
Enter.
For example, to add the RADIUS vendor defined in
d:\acs\myvsa.ini to slot 5,
the command would be:
CSUtil.exe -addUDV 5 d:\acs\myvsa.ini
CSUtil.exe displays a confirmation prompt.
Step 3 To confirm that you want to add the RADIUS vendor and halt all Cisco Secure
ACS services during the process, type Y and press Enter.
CSUtil.exe halts Cisco Secure ACS services, parses the vendor/VSA input file,
and adds the new RADIUS vendor and VSAs to Cisco Secure ACS. This process
may take a few minutes. After it is complete, CSUtil.exe restarts Cisco Secure
ACS services.