Help with using TACACS to control guest http access

Hi, I would like to use my TACACS server to control guest access to the internet. So far I have created a Windows group in AD. I have added a test user to that group. In TACACS I have used group mappings to map to this group. From here, I am a bit unsure of how to proceed. My ideal situation would be that each time a guest connects to one of our network drops, they are allowed to access the internet, only after being prompted and entering the correct usernamre and password, which will be supplied to them as a guest.

Thanks

Reply to
dross
Loading thread data ...

On a pix you can have cut-through proxy. "aaa authentication include http ..."

on a router you can use virtual http and have the authentication on virtual http via TACACS+. In this case you will have to configure a downloadable acl to limit traffic to internet.

Reply to
Vivek

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.