Help please! user authentication

[p.nayak]

HI,

I've run into a problem recently and was wondering if anyone here would be able to help me resolve it. For one of our ASP clients, we need to be able to offer two classes of access to dial in users. Paying members would be provided access to the entire internet and free members would only be able to access about ten pre-determined urls. We're providing this access through the POPs of a fairly large national level ISP. I'd be grateful if someone can point me in the right direction.

Thanks in advance

Prakash

[bob.short]

You might consider an Authentication Server such as Cisco Secure: http://www.cisco.com/univercd/cc/td/doc/pcat/sqasnt.htm

or it's Unix version:

http://www.cisco.com/univercd/cc/td/doc/pcat/sqasux.htm

Either will give you the "Authorization" level you are looking for.

Talk to your reseller of Cisco System Engineer to get the specifics for your environment (http://www.cisco.com/public/ordering_info.shtml).

[tmichels]

SSG is the way to go. You could set up an SSG server off of your router that would give your users the appropriate links depending on their characteristics. For example- set up a vpi that all paying customers come in on. This vpi would be routed to the SSG and be given the appropriate selections for access. (internet, vpn to work, whatever) Non-paying customers would come in on a differnet vpi which would again point them to the SSG server which would give them only specific links- the URLs that you want!

TJ