Cisco 5350, user-based authorization

[jczaplewski]

Have a 5350 communications server, using Radius to authenticate, but want to set an ACL on the Cisco side (local) to limit network communiations after PPP connection to one IP addr. I've tried multiple access-list commands, but have been unable to associate them w/the single user. Any suggestions? TIA.

bennegl@shands.ufl.edu

[#2]

As I see it, best option is to use ACLs.

[Richard Burts]

Your post does not give us much to work with. If you could provide some more specifics - what is the topology, what addressing is used on the 5350 communications server, what addressing is assigned from the dial pool to dial in users, what access are you attempting to control, what have you tried in access lists and where and how did you apply them. If we knew these things we could help you better.

HTH

Rick

[jczaplewski]

Here's the relevant parts of my running-config:

aaa new-model

!

!

aaa authentication login default local group radius

aaa authentication ppp default group radius local

aaa authorization exec default local if-authenticated

aaa authorization network default local if-authenticated

aaa accounting update newinfo

aaa accounting network default start-stop group radius

username username access-class 110

username username autocommand ppp negotiate

access-list 110 deny ip any any

-------------------

I want to place an ACL directly on user username restricting IP access to specific IP addrs. W/this config, however, I can't get username to adopt access-list 110.

TIA for suggestions.