topic ASA authentication proxy using ACS for authorization in Network Security https://community.cisco.com/t5/network-security/asa-authentication-proxy-using-acs-for-authorization/m-p/998723#M938947 <P>Hi, </P><P>I configured the ASA as an authentication proxy. So any user want to telnet to using port 3001, or using port 23 should first authenticate to virtual telnet address and then ACS will authorized the user: </P><P>aaa authentication include telnet 0 0 10.1.1.1 TAC </P><P>aaa authorizaion include telnet inside 0 0 TAC </P><P>aaa authorization include tcp/3000 inside 0 0 TAC </P><P>virtual telnet 10.1.1.1 </P><P>I configured the acs as the following: </P><P>enable shell with privilage 15 </P><P>permit command telent (permit any urgments) </P><P>permit command 6/3001 (permit any arguments). </P><P>So I am authenticated with virtual telnet and can do telnet only with port 23 but not with port 3001. I double my configuration a lot and didn't find any mistake. According to Cisco documentation I should add command 6/3001 (6 is tcp protocol number) but it is not working with me. So please advice !!!</P><P></P> Mon, 11 Mar 2019 12:34:27 GMT abdullah-asi 2019-03-11T12:34:27Z ASA authentication proxy using ACS for authorization https://community.cisco.com/t5/network-security/asa-authentication-proxy-using-acs-for-authorization/m-p/998723#M938947 <P>Hi, </P><P>I configured the ASA as an authentication proxy. So any user want to telnet to using port 3001, or using port 23 should first authenticate to virtual telnet address and then ACS will authorized the user: </P><P>aaa authentication include telnet 0 0 10.1.1.1 TAC </P><P>aaa authorizaion include telnet inside 0 0 TAC </P><P>aaa authorization include tcp/3000 inside 0 0 TAC </P><P>virtual telnet 10.1.1.1 </P><P>I configured the acs as the following: </P><P>enable shell with privilage 15 </P><P>permit command telent (permit any urgments) </P><P>permit command 6/3001 (permit any arguments). </P><P>So I am authenticated with virtual telnet and can do telnet only with port 23 but not with port 3001. I double my configuration a lot and didn't find any mistake. According to Cisco documentation I should add command 6/3001 (6 is tcp protocol number) but it is not working with me. So please advice !!!</P><P></P> Mon, 11 Mar 2019 12:34:27 GMT https://community.cisco.com/t5/network-security/asa-authentication-proxy-using-acs-for-authorization/m-p/998723#M938947 abdullah-asi 2019-03-11T12:34:27Z Re: ASA authentication proxy using ACS for authorization https://community.cisco.com/t5/network-security/asa-authentication-proxy-using-acs-for-authorization/m-p/998724#M938948 <HTML><HEAD></HEAD><BODY><P>Try putting fixup protocol telnet 3001</P></BODY></HTML> Tue, 22 Apr 2008 12:20:59 GMT https://community.cisco.com/t5/network-security/asa-authentication-proxy-using-acs-for-authorization/m-p/998724#M938948 rkalia1 2008-04-22T12:20:59Z