515e Authorization question

[jmconsulting]

I have two sites, one with T1 interface and PIX515e, the other with local cable interface and PIX501, and anestablished VPN tunnel between the two. I need to allow certain personnel into the Cisco via VPN connection from home. I want to establish individual PIX Authentication for those individual but not interfere with the remote site, (due to a high turnover rate), so when someone leaves I can shut their firewall ability into the system.

Any information would be greatly appreciated....

 

[br0ck]

Assuming you are a windows shop...

Setup the vpn client to auth. via AAA Server
Setup AAA for RADIUS on the PIX
Setup IAS on a Windows server

http://cisco.com/en/US/products/hw/...s_configuration_example09186a00800b6099.shtml

This will allow you to control access via Active Directory