AAA-Authorization RADIUS?

[m.matteson]

I just started to configure AAA and I am using Microsofts IAS (RADIUS) server that comes with WIndows 2000 Server. I have the Authentication part already configured and just started to work with authorization. I am a bit confused. I have read a lot of differnet papers and Cisco av-pairs keep coming up. but i also read you can't do authorization w/ radius but another paper said using VSA you can. can anyone set me on the correct path? thanks

[ivillegas]

I hope you are configuring a PIX firewall with MS IAS as Radius server.The following links have the configuration of PIX with MS IAS integration. This will help you to solve your problem:

Merit RADIUS (supporting Cisco AV pairs):

http://www.cisco.com/warp/public/110/pixcryaaa52.shtml#AAA_merit_rad

Configuring Cisco Secure PIX Firewall 6.x and Cisco VPN Client 3.5 for Windows with Microsoft Windows 2000 IAS RADIUS Authentication:

http://www.cisco.com/warp/public/110/cvpn3k_pix_ias.html

Cisco Secure NT RADIUS:

http://www.cisco.com/warp/public/110/atp52.html#server_setup