I would like to know if something like this is possible. If not can anyone offer any suggestions on how to do something similar? Here is the setup. I have two IP networks on different VLAN's. The VLAN's are connected to a 2851 which is doing the routing between the different networks and is also the default gateway. On one of these subnets is the data network 192.168.1.x and the other is a “server†network of 172.16.1.x that has an application the users will connect to. The application on the PC's uses a few different ports, about 10, which I am just going to allow access to those ports to the servers and deny everything else with an access list. The users also do administration work using HTTPS to this same web server. What I want to be able to do is deny HTTPS traffic to the server unless the users are authenticated somehow. I would like the user to open HTTPS://172.16.0.100 and the router intercept the URL string and prompt the user to authenticate. Then if the authentication is successful build an access list to allow the HTTPS traffic to the server. After an inactivity period the router would close the access to the server network. I would like the authentication to happen centrally using Radius and HTTPS. Does anyone have any suggestions?
