topic Re: Radius Authentication between VLAN's in Network Access Control

Radius Authentication between VLAN's

steuver — Fri, 21 Feb 2020 18:00:39 GMT

Is it possible to require authentication via a Radius server in order to access another VLAN? Is so, how do you do it?

Re: Radius Authentication between VLAN's

cjacinto — Sun, 23 Jun 2002 05:19:18 GMT

If you vlans are of different subnets, then accessing vlans is actually routing between subnets. You could do some form of auth proxy on the router as

one host tries to go to another subnet, see:

http://www.cisco.com/warp/customer/793/ios_fw/auth_intro.html

Re: Radius Authentication between VLAN's

yusuff — Sun, 23 Jun 2002 08:56:29 GMT

You might want to consider IOS Firewall (CBAC) implementation on the router which does inter-VLAN routing for you.

Eg; you have to vlans; vlan1 & vlan2, and you want vlan1 to be able to initiate traffic to vlan2 but not vice versa. By implemeting CBAC and creating ACL on ingress on vlan1 you can achieve this; when traffic behind vlan1 will initiate to go to vlan2, the return traffic will be allowed dynamically by opening hole on the ingress ACL on vlan1, but when vlan2 tries to come into vlan1, the ACL on ingress vlan1 will deny it.

Here's a some URLs

http://www.cisco.com/warp/customer/110/32.html

http://www.cisco.com/warp/customer/110/36.html

http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113t/113t_3/firewall.htm

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120t/120t5/iosfw2/iosfw2_2.htm

HTH

R/Yusuf