Downloadable ACL with AP

[lsisti]

It's possible create downloadable ACL in ACS 3.3 to restrict PEAP users access?

AP Ios version is 12.3(4)JA.

Thank You

Laura

[smalkeric]

I think what you are looking for is "authentication-proxy" and IOS firewall feature and I belive is available in ACS 3.3. But make sure your IOS version has IOS Firewall features on it, because "auth-proxy" feature will need an IOS image with IOS firewall.

[darpotter]

The answer is yes you can create DACLs for PEAP... but Im not sure that APs currently support DACLs.

Also, IOS doesn't currently support the DACL fragmentation scheme for handling DACLs that are more than 4K