firewall issue

[blue4cisco]

Is it possible that a firewall allow only pop3 access to a range of host , & other all internet access, can we configure user name based access control in firewall ?

[vijayasankar]

Hi,

1) Yes it is possible. You can have complete control on what is allowed to whom by usign access-lists in the firewall.

2) Yes. You can restrict the network access based on AAA.

Check this link.

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080450b5e.html#wp1043431

Hope this links. Rate the post if you find it usefull.

-VJ

[craig.eyre]

you could try this access-list command to allow users access to POP3

access-list 102 permit tcp XXX.XXX.XXX.XXX XXX.XXX.XXX.XXX eq pop3

If all the people are in the same subnet, you'd only need to add this one permit statement for the POP3.

I assume by "name based access" you are meaning accessing a switch, router or PIX with a "domain" username instead of "admin" or something. If so, you could use AAA to solve that issue.