Cisco Systems Servers Server User Manual


 
Chapter 5 Setting Up and Managing Shared Profile Components
Downloadable PIX ACLs
5-4
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Note The name of a PIX ACL may contain up to 32 characters. The name
may contain spaces; but it may not contain leading, trailing, or
multiple spaces, or the following characters: - [ ] /
Step 5 In the Description: box, type a description of the new PIX ACL.
Step 6 In the ACL Definitions box, type the new PIX ACL definitions.
Note In entering the ACL definitions in the ACS HTML interface, you do
not use keyword and name entries; rather, you begin with a
permit/deny keyword. For an example of the proper format of the ACL
definitions, see the About Downloadable PIX ACLs section on
page 5-2.
Step 7 When you have completed specifying the PIX ACL, click Submit.
Result: Cisco Secure ACS enters the new PIX ACL, which takes effect
immediately. That is, it is available to be sent to any PIX Firewall that is
attempting authentication of a user who has that ACL name as part of his or her
user or group profile. For information on assigning a user or a group to a PIX
ACL, see the Assigning a PIX ACL to a User section on page 7-22 or the
Assigning a Downloadable PIX ACL to a Group section on page 6-27,
respectively.
Editing a Downloadable PIX ACL
To edit a downloadable PIX ACL, follow these steps:
Step 1 In the navigation bar, click Shared Profile Components.
Result: The Shared Profile Components page appears.
Step 2 Click Downloadable PIX ACLs.
Result: The Downloadable PIX ACLs table appears.