Remote access Vpn thru the pix authentication thru acs

[rguano123]

I have a remote access VPN set up with ipsec traffic going thru the pix. I first authenticate against the pix and then the acs server. I am using the acs server for two things coming from the pix. Does anyone now what port the remote access VPN would be using when ipsec traffic got to the ACS.

Thanks,

Rob

[aacole]

The ACS server supports both Radius (udp 1812) or Tacacs+ (TCP port 49), either can be used for the Xauth application that provides the pop up box for user authentication.

Use the command show aaa-server, which lists the details of the aaa servers.

Get back if you need any more info.

Andy

[rguano123]

So by default on a pix fos 6.3 does radius use port 1645 or 1812 for authentication by default

Thanks,

Rob

[aacole]

Rob, it uses 1645.

To change it to 1812 use the command `aaa-server radius-authport 1812'

The 6.3 command reference guide is at

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727aa.html

Andy