You can enable different AV pairs for any of the supported attribute-values. If the CiscoSecure ACS sends those AV pairs to the NAS, and the Cisco IOS does not support them, the attribute you requested cannot be implemented. The following table contains the attribute-value pairs provided in the Cisco IOS software. The primary service. Specifying a service attribute indicates that this is a request for authorization or accounting of that service.
Current values are slip , ppp , arap , shell , tty-daemon , connection , and system .
This attribute must always be included. This indicates the command name for a shell command that is to be run. This indicates an argument for the shell command that is to be run. Multiple cmd-arg attributes may be specified, and they are order dependent. The access list itself must be preconfigured on the router.