Brian,

How do you propose to configure the user id & password into the PIX?
There's no command to allow this.  So you won't be doing any authentication,
except the pre-shared key which is the same for everyone.  One password
between your LAN and the Internet.  Feel safe?

You could install Radius for NT, it comes on the Option Pack  4 CD and is
free.  It won't work without the radius/IIS service pack 6 and some other
upgrade (I forget the name).  Just be forwarned, with this software you get
"exactly" what you pay for.

Rodgers Moore

""Parris, Brian"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Could somebody please explain to me why I would want a Radius Server when
> authenticating a VPN client through my PIX on an NT Server network rather
> than just authenticating locally on the PIX.
>
> Also, what is the advantage of Tacacs and is there any software that can
> perform these duties for less than the $4000 that the Steel-Belted Radius
> and CiscoSecure ACS software cost.  I'm not going to have but a few users
> and can't justify these prices.
>
> TIA,
> Brian Parris
> Network Admin.
> www.carotek.com <http://www.carotek.com>
>
> _________________________________
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to