Hi JG,

I'm looking at doing this with radius and was wondering if you have any links or docs on how this is done. Eg. Free radius at the external site and then ACS in our internal network doing the authentication process.

Thanks for any help.

Craig

Craig,

I beg to differ with JG. I think it can be done. Here is what I would do:

1- configure a Freeware TACACS at the customer

site. This should run on a Linux platform.

2- setup the Linux box to do "port-forwarding"

on tcp port 49 to your ACS Server,

3- setup your ACS server to accept connections

from the customer's network devices.

In this scenario, the linux Freeware tacacs

server will serve like a "pass-through" or

"proxy" the connection to your ACS server.

That being said, I've never tried it on ACS

Server but I've tried it on Linux Freeware

tacacs server where both my "pass-through"

tacacs server and central tacacs server are

running Freeware tacacs+ server

David

Craig,

Here is one I found for IAS. Concept remains the same for all radius.

http://technet.microsoft.com/en-us/library/cc739975.aspx

Regards,

~JG

Do rate helpful posts