TACACS server access-list

[jetur]

Hi,

I would like to know if is possible to control/limit in the tacacs server configuration file the source ip address for a user?

That is, something similar the access-group in the line vty...

[mhoda]

Hi,

Depends on if your AAA server supports NAR (Network Access Restrictions) or not. In ACS on NT/2K, you can configure IP Based NAR to accomplish this.

Pl. lets know if you need help on setting up NAR on ACS. Regards,

Mynul

[jetur]

Hi Mynul,

At the moment I´m using the TACACS+ freeware... And I didn´t find nothing to limit this... Is is possible?

Regards,

Jétur

[mhoda]

Hello Jetur,

If its a freeware, I doubt that it would be possible. Even if its possible, it would be pretty challenging, specially when there is no support. However, to the best of my knowldege, this is not possible using freeware.

Regards,

Mynul

[jetur]

That's ok... I'm trying my best too and i didn't find anything similar... I'll have a look at the ACS...

Thanks a lot!

Jétur