topic Re: How to Limit ACS Groups to Specific AAA Clients in Network Access Control

How to Limit ACS Groups to Specific AAA Clients

N3t W0rK3r — Sun, 10 Mar 2019 23:07:49 GMT

I have several groups of users defined in ACS but I cannot figure out how to go about specifying which network devices (AAA clients) these groups can log into.

We use our ACS primarily to authenticate IT staff who need access to our routers, switches and APs.

Thanks in advance.

John

Re: How to Limit ACS Groups to Specific AAA Clients

Jagdeep Gambhir — Fri, 10 Oct 2008 12:40:41 GMT

You need to use feature called network access restrictions (NAR). Here is the link ,

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/SPC.html#wp697095

Regards,

~JG

Do rate helpful posts

Re: How to Limit ACS Groups to Specific AAA Clients

N3t W0rK3r — Fri, 10 Oct 2008 13:11:54 GMT

That's perfect, but I do not see the option for NAR on my Shared Profile Components page. I'm running ACS 3.3 on an appliance.

Thanks.

Re: How to Limit ACS Groups to Specific AAA Clients

N3t W0rK3r — Fri, 10 Oct 2008 13:38:18 GMT

You can ignore that last post... I found where I need to add it.

Thanks again.

Re: How to Limit ACS Groups to Specific AAA Clients

guibarati — Fri, 17 Oct 2008 13:50:03 GMT

Hi, I'm having the same problem, even else we have the NAR it is mandatory to configure the client's IP address of end client who is accessing the AAA client and I would linke to restrict only the AAA client, did you get it this way?

Thanks.