Summary

As you can see, you can enable and manipulate many options that can be enabled using AV pairs. At this point, you should be comfortable with identifying and configuring these AV pairs. To help in your configurations, Cisco has many sample configurations that include the IOS configurations at the following URL:

http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Software:Cisco_Secure_ACS_NT&s=Implementation_and_Configuration#Samples_and_Tips

A valid Cisco login is required.

As always, it is recommended that you test your configurations prior to implementation. Much of what was done in this chapter can be tested with a router and an ACS.

As you proceed into Chapter 14, "Service Provider AAA and the Cisco CNS Access Registrar," you will now take a look at AAA security from a service provider prospective. This will give you the opportunity to work with the Cisco Access Registrar.