Single point authentication

[pfowlerpbm]

Hey guys...first post here.

I have recently taken over our Cisco network (I am extrememly new to Cisco by the way) due to issues witht he outgoing manager. Anyway, we have a need for a single authentication process on our network. We are in a Windows 2003 server AD enviroment with all 2950 switches, VPN Concentrator and a pix 515e .

Any suggestions would be greatly appreicated.

[darpotter]

Hi

Get Cisco Secure ACS v4.0. It will happily sit between all these devices and AD. For each network service you have you get to define a policy that maps users from their AD groups to ACS authorisation groups.

eg you can supply per group per service vlans, acls, timeouts etc.

Takes a bit of getting up to speed but worth the effort.

Darran