Cisco Secure ACS

james_stickland · ‎01-10-2008

Based on the authenticated user, does it seem possible to

1. hand out an IP address based on that user

or

2. tell a dhcp server "give an address from this pool"

Im quite sure i saw the ability to give out ip addresses somewhere, but how is this done? I dont see ACS listening on the dhcp ports.

Collin Clark · ‎01-11-2008

ACS does AAA and that's it, no DHCP. Let's say you VPN in to an ASA. The ASA passes your authentication to ACS and ACS determines if you're a legit user or not. If you pass, you're allow to connect. At that point the ASA can give you an address, either a reserved one or one from a pool.

HTH and please rate.

craig.eyre · ‎01-21-2008

Hi,

Are you asking this in regards to VPN or something else?

Craig