I am setting up an AS5350 with a single T-1 PRI for users to dial-in. I want to set up 2 "groups" that will have different access. One will have access just to our local campus resources, the other group will have access to the Internet and all campus resources. What is the best solution for defining different access for 2 groups?
I configured the 2 groups in a TACACS server with cisco-av-pair that work as an access list and you can specify the access policy. In your case you can define 2 groups in the TACACS server and you can define separate access lists for the 2 groups. After that you will define users and you will add the users to groups. You can define in the ACS 2 address pools for every type of users.
I use an AS5350 and CiscoSecure ACS 3.3.
If you want more information please let me know and I will give some samples for configurations..
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...
Attached policy provides CLI access to the Cisco 4G router over text messaging. Two files are in the attached .tar file:
2. PDF with instructions on how to load and use the .tcl file.