[c-nsp] Cisco SSG - tcp redirect

Shakeel Ahmad shakeel.ahmad at networkncc.com
Thu Feb 22 13:55:06 EST 2007


Can a captive portal be implemented only by IOS (SSG) or we need any sort of
sepcial hardware like SESM ?




On 2/22/07, Nick Thompson <Nick.Thompson at multibandusa.com> wrote:
>
> This is correct.  Here is a working example of what I use for the
> tcp-redirect portion:
>
> ssg tcp-redirect
> server-group UNAUTH_USER
> server <ip address> <port>
> !
> redirect unauthenticated-user to UNAUTH_USER
>
> Also remember that the server you redirect to must be on a separate
> interface from your SSG uplink interface, and may not be on your SSG
> downlink interface.
>
> Thanks.
>
> Nick Thompson
>
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Velasquez
> Venegas Jaime Omar
> Sent: Thursday, February 22, 2007 9:25 AM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] Cisco SSG - tcp redirect
>
> We are planning to configure a captive portal with authentication via
> Cisco ACS for a WLAN so we decided to add cisco SSG feature to the
> current IOS image on our router.
> Although "Cisco SSG" includes several features ,the only one we think we
> need is "tcp redirect" in order to set what we are being required.
> Can anyone confirm if the only IOS feature i need to add is "tcp
> redirect"?
>
>
> Thanks
>
>
>
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


More information about the cisco-nsp mailing list