topic AAA Authorization in Network Access Control https://community.cisco.com/t5/network-access-control/aaa-authorization/m-p/107803#M810 <P>The problem I have is to get per user authorization working</P><P></P><P>I have got per user authentication working for HTTP FTP TELNET </P><P></P><P>but how do I get per user authorization working with ACS 3.0 on PIX 6.22</P><P></P><P>I am wanting to use TACACS+ </P><P></P><P>The commands below are what I have on the PIX </P><P>Authentication is working </P><P></P><P>aaa authentication include tcp/0 inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 test</P><P>aaa authorization include tcp/0 inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 test</P><P></P><P>On the ACS server I have two users as a test both can Authenticate but what do I need to do to set Authorization say to allow FTP and HTTP to both users but disallow Telnet</P><P></P><P>Please help</P><P></P><P>Cheers </P><P></P><P>Rick</P> Fri, 21 Feb 2020 18:03:32 GMT rick.jones 2020-02-21T18:03:32Z AAA Authorization https://community.cisco.com/t5/network-access-control/aaa-authorization/m-p/107803#M810 <P>The problem I have is to get per user authorization working</P><P></P><P>I have got per user authentication working for HTTP FTP TELNET </P><P></P><P>but how do I get per user authorization working with ACS 3.0 on PIX 6.22</P><P></P><P>I am wanting to use TACACS+ </P><P></P><P>The commands below are what I have on the PIX </P><P>Authentication is working </P><P></P><P>aaa authentication include tcp/0 inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 test</P><P>aaa authorization include tcp/0 inside 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 test</P><P></P><P>On the ACS server I have two users as a test both can Authenticate but what do I need to do to set Authorization say to allow FTP and HTTP to both users but disallow Telnet</P><P></P><P>Please help</P><P></P><P>Cheers </P><P></P><P>Rick</P> Fri, 21 Feb 2020 18:03:32 GMT https://community.cisco.com/t5/network-access-control/aaa-authorization/m-p/107803#M810 rick.jones 2020-02-21T18:03:32Z Re: AAA Authorization https://community.cisco.com/t5/network-access-control/aaa-authorization/m-p/107804#M811 <HTML><HEAD></HEAD><BODY><P><A class="jive-link-custom" href="http://www.cisco.com/warp/public/110/atp52.html#auth_plus" target="_blank">http://www.cisco.com/warp/public/110/atp52.html#auth_plus</A></P></BODY></HTML> Sun, 15 Sep 2002 18:01:33 GMT https://community.cisco.com/t5/network-access-control/aaa-authorization/m-p/107804#M811 jekrauss 2002-09-15T18:01:33Z