[c-nsp] Cisco SSG - tcp redirect

[Velasquez Venegas Jaime Omar]

Altough there are lots of free implementations , if you are Cisco shop
you'd probably want to go with a Cisco solution:
 
Basically you need three components:
 
Cisco Service Selection Gateway (SSG) : IOS feature
Cisco Subscriber Edged Service Manager (SESM) : Software
Authentication Server
 
________________________________

From: Shakeel Ahmad [mailto:shakeel.ahmad at networkncc.com] 
Sent: Jueves, 22 de Febrero de 2007 01:55 p.m.
To: Nick Thompson
Cc: Velasquez Venegas Jaime Omar; cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Cisco SSG - tcp redirect


Can a captive portal be implemented only by IOS (SSG) or we need any
sort of sepcial hardware like SESM ?
 


 
On 2/22/07, Nick Thompson <Nick.Thompson at multibandusa.com> wrote: 

	This is correct.  Here is a working example of what I use for
the
	tcp-redirect portion:
	
	ssg tcp-redirect 
	server-group UNAUTH_USER
	server <ip address> <port>
	!
	redirect unauthenticated-user to UNAUTH_USER
	
	Also remember that the server you redirect to must be on a
separate
	interface from your SSG uplink interface, and may not be on your
SSG 
	downlink interface.
	
	Thanks.
	
	Nick Thompson
	
	-----Original Message-----
	From: cisco-nsp-bounces at puck.nether.net
	[mailto: cisco-nsp-bounces at puck.nether.net
<mailto:cisco-nsp-bounces at puck.nether.net> ] On Behalf Of Velasquez
	Venegas Jaime Omar
	Sent: Thursday, February 22, 2007 9:25 AM
	To: cisco-nsp at puck.nether.net
	Subject: [c-nsp] Cisco SSG - tcp redirect 
	
	We are planning to configure a captive portal with
authentication via
	Cisco ACS for a WLAN so we decided to add cisco SSG feature to
the
	current IOS image on our router.
	Although "Cisco SSG" includes several features ,the only one we
think we 
	need is "tcp redirect" in order to set what we are being
required.
	Can anyone confirm if the only IOS feature i need to add is "tcp
	redirect"?
	
	
	Thanks
	
	
	
	
	
	_______________________________________________ 
	cisco-nsp mailing list  cisco-nsp at puck.nether.net
	https://puck.nether.net/mailman/listinfo/cisco-nsp
	archive at http://puck.nether.net/pipermail/cisco-nsp/
	
	_______________________________________________
	cisco-nsp mailing list   cisco-nsp at puck.nether.net
<mailto:cisco-nsp at puck.nether.net> 
	https://puck.nether.net/mailman/listinfo/cisco-nsp
	archive at http://puck.nether.net/pipermail/cisco-nsp/