Have ACS pass access-list by user or group to Cisco 2600

[chrissmolen]

I am wondering how I can configure ACS to when a user dials into a router and authenticates to ACS , have ACS pass back an access-list to the router based on the user or group?

[gfullage · Accepted solution]

With TACACS, like this:

http://www.cisco.com/en/US/tech/tk583/tk642/technologies_configuration_example09186a0080094656.shtml

With Radius, like this:

http://www.cisco.com/en/US/tech/tk583/tk547/technologies_tech_note09186a0080094032.shtml

[chrissmolen]

Thank you, I got it to work. I have one more question, if you are willing. I want to create groups on a VPN concentrator that are really configured on the ACS server and that is where all of the settings would be pulled from. I try to setup a externally configured group on the concentrator, but on the ACS I see a failed attempt because it looks like it is sending the group name as a user name request

[andrea.meconi]

On the ACS try to create an user with the same name of the group. For this "special" user use the password you have defined on the VPN concentrator.

Andrea.