G-15
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Appendix G ODBC Import Definitions
Action Codes
Action Codes for Initializing and Modifying Access Filters
Table G-4 on page G-16 lists the action codes for initializing and modifying AAA
client access filters. AAA client access filters control Telnet access to a AAA
client. Dial access filters control access by dial-up users.
Transactions using these codes affect the configuration displayed in the User
Setup and Group Setup sections of the HTML interface. For more information
about the User Setup section, see Chapter 7, “Setting Up and Managing User
Accounts.” For more information about the Group Setup section, see Chapter 6,
“Setting Up and Managing User Groups.”
271 SET_DCS_NDG_
MAP
UN|GN,VN,
V1,V2
When the assignment type specified by a 270 action
code is ndg, use this action code to map between the
device command set and the NDG.
VN defines the service. Valid service types are:
• shell—Cisco IOS shell command authorization.
• pixshell—Cisco PIX command authorization.
If additional DCS types have been added to your
Cisco Secure ACS, you can find the valid value in the
Interface Configuration page for TACACS+ (Cisco
IOS). The valid values appear in parentheses after the
service title, such as
PIX Shell (pixshell).
V1 defines the name of the NDG. Use the name of the
NDG as it appears in the HTML interface. For
example, if you have configured an NDG named "East
Coast NASes" and want to use action 271 to apply a
DCS to that NDG, V1 should be "East Coast NASes".
V2 defines the name of the DCS. Use the name of the
DCS as it appears in the HTML interface. For
example, if you have configured a DCS named "Tier2
PIX Admin DCS" and want to use action 271 to apply
it to an NDG, V2 should be "Tier2 PIX Admin DCS".
Table G-3 User Creation and Modification Action Codes (continued)
Action
Code Name Required Description