The cisco ASA proxy authentication would authenticate you prior to being NAT'd, if that fails you are prevented from gaining external access. Thsi can be accomplished for any application you wish. I am sure most if not all enterprise class firewalls have this feature.
Mike On Wed, Dec 16, 2009 at 9:59 AM, David Freedman <[email protected] > wrote: > did you look at VLAN segregation pre/post authentication with either > 802.1x (integrated auth) or VMPS (external auth)? > > Dave. > > Andreas Mueller wrote: > > > > Hello, > > > > are there any (cisco)-NAT-devices which enable the NAT after the user > > has done some kind of authentication - which is checked against a > > radius-server or an active directory for example ? What I need is like a > > captive portal connected to a NAT-device. > > The scenario I try to have is: The user will get its IP-address from a > > private IP-range via DHCP after connecting his computer to the network.. > > With this address he should be able to connect to services within his > > internal network. But to connect to computers outside his network he > > should authenticate himself. > > > > thanks for hints && greetings, > > > > Andreas > > > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > cisco-nsp mailing list [email protected] > > https://puck.nether.net/mailman/listinfo/cisco-nsp > > archive at http://puck.nether.net/pipermail/cisco-nsp/ > > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
