what the 'inbound/outbound' mean in 'aaa authentication include ..'?

[wjemail]

Hi there,

I am a little confused with what the inbound means in the command 'aaa authenticaion include ...'. Does it mean the traffic is from low security interface to high security interface, or any traffic come into the PIX?

Thanks in advance!

Regards,

Wang Jun

[abinjola]

There is no such thing inbound/outbound in this command...it is include or exclude...

Look at the following example :-

The following example includes for authentication TCP traffic on the outside interface, with a local IP address of 192.168.0.0 and a netmask of 255.255.0.0, with a remote/foreign IP address of all hosts, and using a server named "tacacs+".

hostname(config)# aaa authentication include tcp outside 192.168.0.0 255.255.0.0 0.0.0.0

0.0.0.0 tacacs+

This command line excludes Telnet traffic on the outside interface with a local address of 192.168.38.0, with a remote/foreign IP address of all hosts

hostname(config)# aaa authentication exclude telnet outside 192.168.38.0 255.255.255.0

0.0.0.0 0.0.0.0 tacacs+