15 May
2006
15 May
'06
12:19 p.m.
Carlos Mauricio Reyes Sanmiguel <creyes@co.ibm.com> wrote:
The first one is i need to create special kind of groups of people that can access some devices but no others, like i have the admin group that has to access all of the 20 devices (switches, routers..) but i also have the operator group that only has to access 2 of them,
You can use Unix groups, or use rlm_passwd to create groups. See the documentation and "man" pages.
and on the same radius i need to enable some VPN users that only need to registrate to the radius for the VPN account that connects to the PX firewall and not to any of the devices...
You can tell which RADIUS client it is by source IP address. Alan DeKok.