topic Re: Csacs in Network Access Control

Csacs

d.rocco — Sun, 10 Mar 2019 14:22:16 GMT

How can i pass to the remote client the Dns Ip address and the domain name prefix with Csacs Radius Server?

Thanks

Re: Csacs

SteveGodfrey — Mon, 23 Jun 2003 08:13:01 GMT

Assuming you're using VPNGroups

vpngroup group_name dns-server 1.2.3.4

vpngroup group_name deafult-domain micrsoft.com

Re: Csacs

d.rocco — Mon, 23 Jun 2003 09:25:50 GMT

My problem in detail:

I've got a 3660 (NAS) with two Controller E1 in rotary-group and mica modem for analogic connection.

I want that the server radius (CSACS) assign the Dns server ip address and the domain name prefix. Is this possible or i must to change the router configuration?

Thanks

Re: Csacs

ywadhavk — Mon, 23 Jun 2003 13:58:09 GMT

Hi Diego,

You can assign the DNS ip addresses using RADIUS AV pairs.

Please refer to the below link for achieving the above using the RADIUS AV pairs;

http://www.cisco.com/en/US/partner/products/sw/secursw/ps2086/products_user_guide_chapter09186a008007e364.html

Hope that helps,

yatin

Re: Csacs

d.rocco — Wed, 25 Jun 2003 06:12:29 GMT

Hi Yatin,

Thanks for help

Do you know if is there the possibility to pass the domain name prefix too?

I don't find this features.

Thanks

Re: Csacs

ywadhavk — Fri, 27 Jun 2003 03:50:00 GMT

Hi Diego,

I think the passing of the domain name prefix is left upto the DNS server.

Thanks,

yatin

Re: Csacs

ywadhavk — Fri, 04 Jul 2003 18:40:26 GMT

Hi Diego,

I found the av-pairs that can do this;

TACACS+ attribute-value (AV)

dns-servers

wins-servers

Vendor-Proprietary Radius Attribute

135 Primary-DNS-Server

136 Secondary-DNS-Server

Hope this helps,

yatin

http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps1826/products_feature_guide09186a0080080f8b.html