ACS 3.2 NAR (Network Access Restriction) for LMS & ITM station

[MARC MONTANARI]

I would like to define Group NAR to prevent Users from this Group to Access a LMS & ITM management stations. Although I succeeded to define NAR to prevent users to access some CISCO switches or routers, the same NAR configuration doesn't work to prevent access to management stations.

I just defined the AAA client name as defined in the NDG and put a * for Port & IP @. CAn anybody help ?

Thanks

[b.speltz]

Have checked if there is a bug or known issue with this configuration, since some of the users are prevented from gaining access to switches and routers and the issue seems to be with the management stations only. Check if the documentation helps. http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/