18-47
User
Guide

for

the

Cisco

Application

Networking

Manager

5.2
OL-26572-01
Chapter
18






Administering

the

Cisco

Application

Networking

Manager
Using
an

AAA

Server

for

Remote

User

Authentication

and

Authorization
Do
the

following:
a.
From
the

sidebar

menu,

choose
Network
Device

Groups

>

Device

Type.

The

Device

Group
General
window

appears.
b.
In
the

Name

field,

enter
ANM.
c.
(Optional)
In

the
Description
Fi

eld,

enter

a

de

scription.

For
example,
ANM

Ser

ver.
d.
In
the

Parent

field,
select
All
Device

Types.
e.
Click
Submit.
Step
2
From
the

sidebar

menu,

choose
Network

Device

Groups

>

Network

Devices

and

AAA

Clients

to

add
a
device.

The

Network

Devices

and

AAA

Clients

window

appears.
Do
the

following:
a.
In
the

Name

field,

enter
ANM.
b.
From
the

Network

Device
Groups
pane,

do

the

following:

–

In

the

Location

field,

select

All

Locations.

–

In

the

Device

Type

field,

select

All

device

Types:ANM,

which

is

t

he

device

type

that

you
created
in

Step

1

.
c.
From
the

IP

Address

pane,

do

t

he

following:

–

Choose

the

IP

Range(s)

radio

button.

–

From

the

IP

and

Mask

fields,

enter

the

IP

address

and

Mask

to

use

and

click

Add

to

ad

d

th

e
values
to

the

IP/Mask

table.
d.
From
the

Authentication

Options

pane,

check

the
TA
C

A

C

S

+


check

box.
e.
Click
Submit.
Step
3
From
the

sidebar

menu,

choose
Users
and

Identity

Stores

>

Identity

Groups

to

create

an

Identity
Group,
which

will

be

used

later

to

map

users

to

a

specific

role.

The

Identity

Groups

General

window
appears.
Do
the

following:
a.
In
the

Name

field,
enter
a

name
for
the
group.
For

example,
ACE-Admin.
b.
(Optional)
In
the

Description

field,

enter

a

description

for

the

group.

For

example,
ACE
devices
admin.
c.
In
the

Parent

field,
select
ALL
Groups:ANM-Groups.
d.
Click
Submit.
The

Identity

Groups

window

appears.
e.
From
the

Identity

Groups

window,

drill

down

and

check

the

check
box
of

an
organization
division/roll
to

associate

with

the

group.

For

example,

check

the

ACE-Groups

check

box

(All
Groups
>

ANM-Groups

>

ACE-Admin).
f.
Click
Create.
g.
Repeat
Step
3

for
every
Identity

Group
that
you

need
to
create.
Step
4
From
the

sidebar

menu,

choose
Users
and

Identity

Stores

>

Internal

Identity

Stores

>

Users

to

create
a
user.

The

Users

General

window

appears.
Do
the

following:
a.
In
the

Name

field,

enter

a

user

name.
b.
From
the

Status

dr

op-down

list,
set
the
status

for


the

user

account.
For
example,
Enabled.