Figure 1613 Group Setup Configuration Window

[View full size image]

ciwo kkstk radios

P I1

JS3L

ciwo kkstk radios

P I1

lur.h-; c-: i y:prax7*e]fll.Z,Bparai.t ¡r. CD n-iV ILTIL JPJ

r IWft 191 ] aK*-h3-2?-c7cft-BiTOl r r [COV-. 103] LULv--lij2î-cctJ U-!.'j"fc:

r ICWWW] C15wh32? FfCiTTp|-T-

■ I ^ "">■ ■■«■ Su-."" . ÜTTHAimiSJihAM

■ HAMUS VwJwEn.iUV MuH hum

(jmp Shfiiii'i^

jiifi-fiHh^jiT ¿FT-l^-i frt « . I Pl ^KT] Md fedUEpWrÜU ulnV.Tlr,

AC; 'L^Î: -^flit mfniA^OL Ter r^rrr.i ■■ vrJl+fT.'-'ivr,

111"

In Figure 16-13 , it is only possible to see the first three of four configuration entries added to the Cisco IOS/PIX RADIUS Attributes box because of the limited size of the window. As with the TACACS+ configuration, this is a very liberal configuration that allows access to all resources after the user successfully authenticates. Four lines are added to the auth-proxy attributes. The four lines that are included in the cisco-av-pair window are as follows:

auth-proxy:priv-lvl=15

auth-proxy :proxyacl#1=permit icmp any any auth-proxy:proxyacl#2=permit tcp any any auth-proxy :proxyacl#3=permit udp any any

0 0

Post a comment