Internet Access

[paltel]

Hi,

I applied Access list on our main router to let the users to access to the internet through IP address, but this case is not useful because maybe the user move from site to another which cause the ip address to be changed, and for security reasons we want every user to access to the internet through his/her account through AAA. I tried IOS Authentication Proxy but i think not useful.

I want another solution to let the users access the internet by their accounts not by IP addresses.

Thanks

[sachinraja]

hi paltel

why do you think the auth proxy feature isnt useful.. its a very good feature ,especially for controlling internet access... you need to have a ACS or any other radius server to define the user profiles... once this is done, the user will be allowed to browse only if the authentication parameters are correct...

you can also have proxy based authentication,but am not sure how to do this..

is the internet browsing through the same PIX, router even if the user goes to another site ?? if yes, then you can use the auth proxy, otherwise we need to think of something else..

Raj