PIX and win2K authentication

[rfullmer]

Can someone tell me how to use the win2k IAS instead of the cisco ACS with a PIX for authentication.

We love the ACS but have some smaller clients that do not want to pay for ACS.

thanks very much!

[r-simpson]

IAS is radius so just use the RADIUS config examples at: http://www.cisco.com/pcgi-bin/Support/PSP/psp_view.pl?p=Hardware:PIX&s=Software_Configuration

[bfetzer]

The config examples on Cisco's website should do it for you. It works very very well. I have our dual PIX 520's set to authenticate against the IAS service on WIN2K, which allows only users in the "dun group" VPN access. Shoot me an email if you have any trouble