From: Brian McGahan (bmcgahan@internetworkexpert.com)
Date: Tue May 02 2006 - 13:43:48 ART
AFAIK the only way to do it on the router itself would be with
authentication proxy, but this would still require an external TACACS or
RADIUS server. It's not exactly what you're describing, but if you can
get ACS to return a custom webpage then it may work for your
application:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cg/hs
ec_c/part15/ch10/schauthp.htm
http://www.cisco.com/en/US/tech/tk59/tech_configuration_examples_list.ht
ml
PIX also supports a variation of this:
http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_1/co
nf_gd/fwaaa.htm
HTH,
Brian McGahan, CCIE #8593
bmcgahan@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987 x 705
Outside US: 775-826-4344 x 705
24/7 Support: http://forum.internetworkexpert.com
Live Chat: http://www.internetworkexpert.com/chat/
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
Of
> Faryar Zabihi (fzabihi)
> Sent: Tuesday, May 02, 2006 11:13 AM
> To: ccielab@groupstudy.com
> Subject: HTTP Redirect
>
> Can I do a HTTP redirect on a router or FW where for ex. you direct
> everyone from a certain ip address space to a policy page and then
open
> access if they accept?
> is this possible in IOS on a router or even a pix/asa?
>
> Faryar
>
>
This archive was generated by hypermail 2.1.4 : Thu Jun 01 2006 - 06:33:20 ART