accessing diferent devices

[Alan DeKok]

Carlos Mauricio Reyes Sanmiguel <creyes at co.ibm.com> wrote:
> The first one is i need to create special kind of groups of people
> that can access some devices but no others, like i have the admin
> group that has to access all of the 20 devices (switches, routers..)
> but i also have the operator group that only has to access 2 of
> them,

  You can use Unix groups, or use rlm_passwd to create groups.  See
the documentation and "man" pages.

> and on the same radius i need to enable some VPN users that only need
> to registrate to the radius for the VPN account that connects to the
> PX firewall and not to any of the devices...

  You can tell which RADIUS client it is by source IP address.

  Alan DeKok.