Restrict user access to web

[rjlopez]

I would like to restrict user access to web via username and password on a Cisco 851 router. In other words I would like the user to be prompted with a user name and password in order to access web content. Is this possible via AAA or ACL?

Thanks,

Ray

[royalblues]

Do you mean HTTP access of the router or the internet?

Narayan

[Rutger Blom]

If you mean the admin webinterface on the router you can do this by enabling the http server in the router (or even better https) and then enable aaa authentication on the http server.

If you mean access to web on the Internet I think you should be looking into authentication proxy which is a component of the firewall feature set.

Rutger

[rjlopez]

I meant the access to the internet. I will post message on the firewall forum.

Thankyou for your time and assistance.

[Jagdeep Gambhir]

What you are trying to achive can be done using ACS ( Radius ).

We need to MAP ACS group with the specific AD group with a condition NO ACESSS.

Check out this link,

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs40/user/qg.htm#wp940503

Hope that helps !