Cisco Secure ACS

[james_stickland]

Based on the authenticated user, does it seem possible to

1. hand out an IP address based on that user

or

2. tell a dhcp server "give an address from this pool"

Im quite sure i saw the ability to give out ip addresses somewhere, but how is this done? I dont see ACS listening on the dhcp ports.

[Collin Clark]

ACS does AAA and that's it, no DHCP. Let's say you VPN in to an ASA. The ASA passes your authentication to ACS and ACS determines if you're a legit user or not. If you pass, you're allow to connect. At that point the ASA can give you an address, either a reserved one or one from a pool.

HTH and please rate.

[craig.eyre]

Hi,

Are you asking this in regards to VPN or something else?

Craig