Cisco → [HELP] Remote Access ...

Hi,

I need some help for drawing small sketch diagram for the components of the following scenario.
We are about to order Analog Modem explained in this link:

'http://www.cisco.com/en/US/products/hw/routers/ps259/products_data_sheet 09186a00801b1c38.html'

i need some help from you to draw the map as to help me understand the different parts of the solution (16 port analog modem, 2600 router, authentication and user management, auditing).

some body told me about the TACACS and Radius methods for authentication and auditing. i tried hardly to find how these components will be integrated and listed on the diagram.

I really do appreciate your quick response.
Thanks in advance for help,
Ashraf

Have a look at this to see how it will be implemented without TACACS and radius methods:

»www.cisco.com/en/US/prod ··· cd.shtml

Authentication is carried out by the router itself.

You might want to have a look at these links too:

Radius

TACACS

Hope these help.

and BTW... welcome to the Cisco Forum. LOL!

I *think* this is what you want your network to look like but since I am not familiar with your setup, this is only a stab in the dark.

Good luck Ashraf.

Well,

Many thanks for your quick reply
One more thing i still need to know,

How i can track dial in users (Auditing)? in both cases using TACACS/Radius or without using TACACS/Radius ..

Thanks,

Welcome to BBR and the Cisco Forum aastal and congratulations on your first post as a member. Great to have you here.

With TACACS/RADIUS Server, depends on the server.

With the router performing the authentication, you can use SNMP, syslog or just a normal show command:


For all its faults, Windows Server is a decent RADIUS server.

Here's a link for the background:

»www.microsoft.com/techne ··· dius.asp

*Personally*, I would use a RADIUS server, hence making user management easier from the point of security and it also facilitates auditing. Just my 2 pence.

Nozero, Thanks for your greetings ...:D

Covenant, You are a super hero

Following up to the Radius issue, can we integrate it with Active Directory Windows2000?

and can radius be installed on the same machine running windows 2000 Active Directory?

and finally, i noticed on your diagram that you placed two radius servers, why?

Thanks again,
Happy new year in advance,
Ashraf

said by aastal:

---

Following up to the Radius issue, can we integrate it with Active Directory Windows2000?

and can radius be installed on the same machine running windows 2000 Active Directory?

---

I believe so but may I suggest you post a question in the MS forum (link below) to ask them these questions and also for docs on how to do it. The guys there are really good:

»Microsoft

said by aastal:

---

and finally, i noticed on your diagram that you placed two radius servers, why?

---

Redundancy being one of the myriad of other reasons. But you only really need a primary RADIUS server, the secondary is optional.

New year greetings to you too Ashraf.