did you look at VLAN segregation pre/post authentication with either 802.1x (integrated auth) or VMPS (external auth)?
Dave. Andreas Mueller wrote: > > Hello, > > are there any (cisco)-NAT-devices which enable the NAT after the user > has done some kind of authentication - which is checked against a > radius-server or an active directory for example ? What I need is like a > captive portal connected to a NAT-device. > The scenario I try to have is: The user will get its IP-address from a > private IP-range via DHCP after connecting his computer to the network.. > With this address he should be able to connect to services within his > internal network. But to connect to computers outside his network he > should authenticate himself. > > thanks for hints && greetings, > > Andreas > > > ------------------------------------------------------------------------ > > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
