Downloadable IP ACLs feature

In article , dominix wrote: :in his Secure ACS server (for windows) Cisco has this : :Downloadable IP ACLs-Cisco Secure ACS version 3.3 extends per-user ACL :support to any Layer 3 network device that supports this feature.

:what are "network device that supports this feature" ? :what do they mean ?

The PIX for one; the new ASA series for another. Possibly the VPN3000 series.

The supported devices are,

PIX Firewalls VPN 3000-series Concentrators

It will not work on routers.

:The supported devices are,

:PIX Firewalls :VPN 3000-series Concentrators

:It will not work on routers.

As I indicated before, it is also supported on the Cisco ASA series of security appliances.

thank for your precise reply, ... so how do you guys manage access-list on routers ?

cheers

In article , dominix wrote: :so how do you guys manage access-list on routers ?

Master copy on tftp server, tftp in the update at need. But then I don't have any per-user ACL needs on our routers.

Hi !

You could use the RADIUS-attribute cisco-av-pair for downloading per-user ACLs to the router.

Thomas

"dominix" schrieb im Newsbeitrag news: snipped-for-privacy@o13g2000cwo.googlegroups.com...