Reference Guide
...
TACACS+ Access Manager
Basic Configurations for TACAC...
Adding RADIUS/TACACS+ Attributes
Instead of using black key or white key policies, TACACS+ and RADIUS supporting devices can use Attribute-Value Pairs (AVP) as preset policies. These AVPs can be defined using the Web GUI. To define TACACS+ and RADIUS attributes:
- Navigate to Policy > Policy Keys.
- Click on the Add button.
- Select the Policy Key Type then next.
- Enter the Radius Attribute and description. (Text before the first space is considered an attribute key. Text between the first and second space is considered an operand. Text after the second space is considered an attribute value.
- Select the element types to add the attribute to.
- Click Save.
RADIUS Attribute definition screen
CISCO IOS AVPs Example: cisco-avpair := shell:priv-lvl=1 Service-Type := NAS-Prompt-User