Afternoon all.

I'm tinkering with RADIUS at the moment and I'm trying to figure out how to do something. What I've got currently is under Microsoft IAS, I have 2 policy's defined for L1 and L15 access. This all works great I can add and remove groups and it works as expected.

However I want to expand this a bit more and have a bit more control over who has what. What I was thinking was been able to break sections up into :

1) Core & Gateway

2) ASP

3) Internal

4) Pix

5) voice

etc and based on the groups your are assigned to will you get access and what level.

I'm having a read around on Cisco on their AAA documentation but I'm not finding much which will help me.

Does anyone have some sort of guides advice?

Thanks