Network Security Principles and Practices

Using AAA for Auth-Proxy

Auth-proxy is a technique in which users passing through a router are authenticated using AAA mechanisms. Generally speaking, the router is set up with an access list that normally block the passage of users through the router to a private network behind it. However, with auth-proxy deployed, the users can get access to the network behind the router after they authenticate using AAA. Auth-proxy provides the mechanism through which the authentication takes place. After the authentication has occurred, the access list blocking access is modified to allow the authenticated user to go through. Example 19-5 shows the configuration needed to set up a router to do proxy authentication. Example 19-6 shows the accompanying RADIUS ...