Cisco 1721 RAS and PIX firewall

[coolpor2]

We're looking to implement a RAS dialin solution using a 1721 router, my question is....

Do we need to secure the connections with a firewall, or is AAA and encryption enough.

[beth-martin]

Using the AAA facility, you can authenticate users with either a local or a remote security database. For more information about what a local and remote security database are, refer to the chapter "Local Versus Remote Server Authentication."

http://www.cisco.com/en/US/products/sw/iosswrel/ps1826/products_configuration_guide_chapter09186a00800d9bce.html

[coolpor2]

Thanks for the link it'll help when we come to configure AAA, as regards the firewall issue i've read a variety of approaches to securing remote access, some of these mention firewalling but give no scenarios or examples - others have no firewall(s) in the network diagrams - only a RADIUS server