topic Re: ACS 3.0 Authorization in Network Access Control

ACS 3.0 Authorization

emily — Fri, 21 Feb 2020 18:01:11 GMT

Dear All:

I want restrict someone user can access inside ftp server but can't access inside telnet server by through authroization on ACS 3.0

In addtion to , I want to know ACS 3.0 can logging who login inside ftp server and who attemp to login inside telnet server

Thanks for you help

Re: ACS 3.0 Authorization

jekrauss — Sat, 29 Jun 2002 00:59:23 GMT

The approach you take depends somewhat on where the user is originating the request.

If they are dialing in, you can pass down an ACL from ACS.

aaa authentication ppp default group tacacs local

aaa authorization network default group tacacs local

If they are telnetting in from a router, then you can enable command authorization on the router:

aaa authentication login default group tacacs local

aaa authorization exec default group tacacs local

aaa authorization commands 1 default group tacacs local

aaa authorization commands 15 default group tacacs local

Then configure a command authorization set in ACS.

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/csnt30/user/c.htm#xtocid1001113

HTH

Jeff

Re: ACS 3.0 Authorization

emily — Sat, 29 Jun 2002 02:45:55 GMT

Thank you for you reponse , But i would like to know about ACS Accounting, whetrher ACS 3.0 could logging service type (for example : telnet , ftp , pop3 ) when someone user access service form outside dialing

Thanks in advinces