aaa authentication

[gcumarasamy]

In PIX OS version 6.1, the "aaa authentication" command does not have the option to configur for either inbound or outbound. Is this mean when I configure the aaa authentication command, it's for both inbound and outbound??

If it is for both is ther a way of telling the pix to only authenticate the inbound traffic??

[jekrauss]

Not sure what you mean, but you can perform that using:

aaa authentication include | exclude authen_service inbound | outbound | if_name local_ip local_mask foreign_ip foreign_mask group_tag

or

you can use the newer:

aaa authentication match acl_name inbound | outbound | if_name group_tag

You may have been looking at the section that covers authentication TO the pix.

Here's the reference to 6.1 commands I listed above:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/cmd_ref/a.htm#xtocid1

HTH

Jeff

[gcumarasamy]

When do help for aaa on Pix OS ver 6.1(2), I don't see the option for inbound | outbound...why is this ?