auto proxy fonctionality on PIX

[jjpeyrache]

is auto proxy work on PIX like on IOS firewall, customer

wants to use to authenticate users on Raduis server passing thru PIX ?

thanks for any advice

JYP

[ywadhavk]

Hi Jeanyves,

This will help you;

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094188.shtml

Thanks,

Yatin

[jjpeyrache]

hi Yatin

thanks for your quick response, i saw already this example

but don't know how to explicit redirect outside user to authenticate/authorize

on radius thru PIX ?

is it documented somewhere

thanks

JYP

[jmia]

Hi -

The following link will be useful to your customer:

http://www.cisco.com/en/US/tech/tk583/tk547/tech_configuration_examples_list.html

Hope this helps --

[jjpeyrache]

Hi

thanks also saw these article but didnt macht with Customer's configuration

Client without VPN client ==== >PIX 6.2 ===AAA==>Radius Server

JYP

[ywadhavk]

What's not matching the requirement? The examples show 'outbound' authentication and authorization, if you need it for INBOUND users, then just changee the commands for inbound.

Is that the concern or something else?

thanks,

yatin

[jjpeyrache]

customer applied exactly same setup as reported in article

"performing authentication;authorization and accouting of users through PIX

Versions 5.2 and later"

but still doesnt work so did it really work with Raduis server ?

thanks for any comments

JYP

[ywadhavk]

Hi,

I should have quoted this earlier for clarity, but that is the very first line in the doc on the url I sent;

RADIUS and TACACS+ authentication may be done for FTP, Telnet, and HTTP connections. TACACS+ authorization is supported; RADIUS authorization is not.

Thanks,

yatin

[jjpeyrache]

thanks for your response customer finally find a configuration

that works with Radius Authorization !!! even not supported

but is very disapointed about security issue because he need

to apply an access-list whole open in this outside connection

in order to work like

access-list 101 permit tcp any any eq telnet ?

is it the correct configuration and safety one ?

thanks

JYP