PIX 515e and RADIUS

[r.lent]

Can I set the PIX 525e I have to use IAS within Windows 2000 to Authorise users to access the Internet?

I have the PIX between my network and an ADSL router, but I would like to be able to control who can access the internet from the network.

Any help appreciated.

Robin.

[rj.remien]

Hi Robin,

Yes you can if you just want to do "authenticate" users. RADIUS, the protocol that IAS uses, in conjunction with the PIX, will allow you to setup who can start outbound connections from your LAN. If you want to "authorize" users, you would need a third party TACACS+, on a unix platform.

A quick definition:

Authenticate means which users are able to start outbound connections.

Authorize means what type of outbound connection each user is allowed to start.

So, I believe you would be OK.

Here is a link that should help.

http://www.cisco.com/warp/customer/110/atp52.html

RJ

[r.lent]

Hi RJ,

Thanks for your response. I will give this a try.

Unfortunately I will be in the dark a bit as I can not get to the link that you posted. I do not have authorisation to that link.

Thanks anyway.

Robin.