topic Re: Is ACS as AAA servers support the proxy state attribute .. ? in Network Access Control

Is ACS as AAA servers support the proxy state attribute .. ??

sjafrial.esa — Sun, 10 Mar 2019 14:21:17 GMT

Hi,

I believe out there can help me to identified the needs. I have ACS as AAA server, we would like to colloborate with another service provider on offering vpdn access. The SP have an proxy AAA, our company only have ACS 3.0. Do this ACS can support the proxy state attribute.

Any advice and reference are higly appreciate.

Regards.

Re: Is ACS as AAA servers support the proxy state attribute .. ?

sghosh — Wed, 11 Jun 2003 19:52:57 GMT

Hi,

ACS has been tested as a proxy server, I am not sure what you mean by "proxy state attribute".

Thanks

Sujit

Re: Is ACS as AAA servers support the proxy state attribute .. ?

mhoda — Wed, 11 Jun 2003 21:01:08 GMT

Hi,

So long as the proxy server on other ISP is setup properly, ACS should able accept the packets and authenticate users. There should not be any issue.

Thanks,

Mynul

Re: Is ACS as AAA servers support the proxy state attribute .. ?

sjafrial.esa — Thu, 12 Jun 2003 00:29:52 GMT

Ok, if the ISP proxy server are setup properly, where shall I configure on my site, is it only at adding AAA server only then define the other ISP AAA.

Currently my ACS used TACACS+ as AAA, and the other ISP proxy server used RADIUS. Do this still can work ?

Regards.

Re: Is ACS as AAA servers support the proxy state attribute .. ?

mhoda — Thu, 12 Jun 2003 02:28:57 GMT

Hi,

Yes, adding Proxy Server of ISP as a AAA client on your ACS server is what you need. You just define the prorocol to be radius.

Yes, it will work along with your tacacs+, there should not be any issue. Thanks,

Mynul

Re: Is ACS as AAA servers support the proxy state attribute .. ?

sjafrial.esa — Thu, 12 Jun 2003 02:47:54 GMT

Thanks Hoda, that will clear my cloud.

One more question, do any others thing that I shall consider e.g others ISP LAC/UG to be defined at my AAA ??

Re: Is ACS as AAA servers support the proxy state attribute .. ?

mhoda — Thu, 12 Jun 2003 21:24:00 GMT

Hi,

Great !

If you are just authenticating the users, then configuration would be pretty straightforward. Not sure if you are trying to set up VPDN and authenticate the tunnel with ACS server. I am guessing thats not the case. As far as I understand you are just getting proxy information from the ISP AAA server and then authenticate the user. Should that the case, you just need to create the user/group info local to your side. Thanks,

Mynul