web authentication for admission

[wsmith@ca.ibm.com]

Hello All

I have a group of users connected to our network that I need to authenticate.  These users are all on an easily identified subnet.

There's also servers on the 'other side' that we allow.

Currently we use ACLs on a 6509 switch.. where each of these special users has a static IP

What I'd like to do is put an ASA or other device in place such that the end users on the 'other side' must do a web based authentication.

I don't want any vpn/ipsec/tunneling ... just a simple authentication.

This is similar to the auth-proxy function in a Router. 

I thought we could do this on an ASA, but can't find it in the doc.

I'm also considering using web-auth on the 3560/4948.6509 switch.

Appreciate any suggestions

Thanks in advance

Wes

[Panos Kampanakis]

The ASA can do it and it is called cut through proxy this time. Here is a sample config http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807349e7.shtml

Like you said, web-auth/auth-proxy can be considered on the switch http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_configuration_example09186a008009466e.shtml

I hope it helps.

PK