You can use ACS 2.6 with AAA in your Router and you can use this Inside the PIX.
this is for your router
aaa authentication fail-message ^CC Access Denied...Please check your Login nam
e and Password.^C
aaa authentication login default group tacacs+ enable
aaa authentication ppp default group tacacs+
aaa accounting exec default wait-start group tacacs+
aaa accounting network default wait-start group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
this for your asyn interface
interface Async43
description Access to Corp - M21-A11 - Tel: 555-5555
ip unnumbered Ethernet0/0
no ip directed-broadcast
encapsulation ppp
ip tcp header-compression passive
async dynamic routing
async mode interactive
peer default ip address pool cisco
no cdp enable
ppp authentication pap
you have to install the ACS2.6 on NT2000 server
tacacs-server host 172.xxx.xxx.18
tacacs-server key 123
and this for your PIX
tacacs-server (inside) host 172.xxx.xxx.18 123 timeout 5
aaa authentication any outbound 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 tacacs+
aaa authentication telnet console tacacs+
aaa authentication any dmz1 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 tacacs+
aaa accounting any outbound 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 tacacs+
aaa accounting any dmz1 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 tacacs+
Hope this help!
