User / Client Authentication (Group Specific)

[RayoVac]

I have a question regarding User/Client Authentication.

Is it possible in 4.1 or NG to permit a group of users Any Access and Deny others? Obviously I would like to do this via Radius or OS Password... without building users in FW1. Annndd if that were not enough I would prefer not to load any client side software.

Currently we achieve the above via static IP and workstation objects based on those IPs to permit a specific set of users ANY access. Would love this ability via some sort of Auth.

If not possible this way... those that do similar... what does it take? Do I need the Accounting Module? Or am I forced to load client software?

Any and all help would be greatly appreciated.

Thanks,

RayoVac

 

[Piloria]

if you want to intigrate with any form of ldap server(win2k AD, netware, notes...ect) for your user/password then you will need the accounting module.
i am currently trying to do this on my own firewall with active directory and NG (dont try using AD unless you have NG)