cut-thrgh authorization problem with acs and asa

[diptanshusingh]

hi i have a problem guys.. i am using an asa firewall with cisco acs 3.1. i want to use authorization with cut thrgh proxy using tacacs+..

access-list auth_prxy extended permit ip any any

aaa authentication match auth_prxy inside acs

aaa authorization match auth_prxy inside acs

aaa-server acs protocol tacacs+

aaa-server acs host Server

key secret

when i try it says not authorized.. i was trying to add auth-proxy attribute in acs for tacacs+ but it's not working..

[Vivek Santuka]

Hi,

Auth-proxy is an IOS concept.

On Asa cut through authentication is possible.

For Cut through to work you need not add the auth-proxy attribute in ACS. If the user exists and the password is correct, Asa would let the traffic go through.

This might help :-

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/config/fwaaa.htm#wp1043681

Regards,

Vivek

[diptanshusingh]

Hi vivek

thanks for ur reply.. i had already figured it out.. we can do the authorization also for cut thrgh with the help of shell command authorization using tacacs+..