topic Re: Cisco 5350, user-based authorization in Network Access Control

Cisco 5350, user-based authorization

jczaplewski — Sun, 10 Mar 2019 21:01:47 GMT

Have a 5350 communications server, using Radius to authenticate, but want to set an ACL on the Cisco side (local) to limit network communiations after PPP connection to one IP addr. I've tried multiple access-list commands, but have been unable to associate them w/the single user. Any suggestions? TIA.

bennegl@shands.ufl.edu

Re: Cisco 5350, user-based authorization

Tue, 01 Mar 2005 17:15:17 GMT

As I see it, best option is to use ACLs.

Re: Cisco 5350, user-based authorization

Richard Burts — Tue, 01 Mar 2005 18:50:28 GMT

Your post does not give us much to work with. If you could provide some more specifics - what is the topology, what addressing is used on the 5350 communications server, what addressing is assigned from the dial pool to dial in users, what access are you attempting to control, what have you tried in access lists and where and how did you apply them. If we knew these things we could help you better.

HTH

Rick

Re: Cisco 5350, user-based authorization

jczaplewski — Tue, 01 Mar 2005 19:43:59 GMT

Here's the relevant parts of my running-config:

aaa new-model

aaa authentication login default local group radius

aaa authentication ppp default group radius local

aaa authorization exec default local if-authenticated

aaa authorization network default local if-authenticated

aaa accounting update newinfo

aaa accounting network default start-stop group radius

username username access-class 110

username username autocommand ppp negotiate

access-list 110 deny ip any any

-------------------

I want to place an ACL directly on user username restricting IP access to specific IP addrs. W/this config, however, I can't get username to adopt access-list 110.

TIA for suggestions.