[cisco-nas] TACACS interface 'opt-out'

[Dennis Peng]

You can use RPM to apply different templates to different DNIS's. Each
template can have different types of ppp/aaa configuration. Kind of
overkill for your needs, but the dnis map won't be able to do what you
want.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fdial_c/fnsprt11/dafrpm.htm

Dennis

James Savage [jsavage at yorku.ca] wrote:
> Hi,
>   We have, for years, used TACACS to control access to all interfaces on our
> a-servers.  I've a requirement to allow access to users dialing a particular
> DNIS on a 5300 without TACACS AAA while still forcing different DNIS callers to
> authenticate.  I thought the 'AAA DNIS MAP' would do it but it doesn't seem to
> allow you to config. no authentication.   Any suggestions on how I might
> accomplish this?.....Is it even possible?
> 
> .......thanks in advance...........Jamie
> 
> James Savage                              York University
> Senior Com. Tech.                         108 Steacie Bldg.
> jsavage at yorku.ca                          4700 Keele Street
> phone: 416-736-2100 ext.22605             Toronto, Ontario
> fax: 416-736-5701                         M3J 1P3, CANADA
>                 /\      /\      /\      /\
>                /  \    /  \    /  \    /  \
>                    \  /    \  /    \  /
>                     \/      \/      \/
> 
> _______________________________________________
> cisco-nas mailing list
> cisco-nas at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nas