Intelligent Services Gateway Configuration Guide, Cisco IOS XE Release 3S
Configuring ISG as a RADIUS Proxy in Passthrough Mode
Downloads: This chapterpdf (PDF - 1.15MB) The complete bookPDF (PDF - 5.67MB) | The complete bookePub (ePub - 1.6MB) | Feedback

Configuring ISG as a RADIUS Proxy in Passthrough Mode

Configuring ISG as a RADIUS Proxy in Passthrough Mode

Configuring ISG as a RADIUS Proxy in Passthrough Mode allows the Cisco Intelligent Services Gateway (ISG) acting as a RADIUS Proxy to direct all the RADIUS traffic from the client to the RADIUS server, without creating an ISG session.

This module describes how to configure ISG in RADIUS Proxy passthrough mode.

Finding Feature Information

Your software release may not support all the features documented in this module. For the latest caveats and feature information, see Bug Search Tool and the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the feature information table at the end of this module.

Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/​go/​cfn. An account on Cisco.com is not required.

Prerequisites for Configuring ISG as a RADIUS Proxy in Passthrough Mode

  • You need to configure the authentication and accounting methods.
  • You need to configure the AAA server, that is its IP address, name, and group.

Information About Configuring ISG as a RADIUS Proxy in Passthrough Mode

Benefits of Using ISG in RADIUS Proxy Passthrough Mode

  • This is more secure as the AAA server's IP address is hidden from the ultimate host.
  • Performance is improved as ISG sessions are not created for RADIUS clients.
  • The same ISG can serve in both RADIUS Proxy and RADIUS Proxy passthrough mode simultaneously.

Additional References for ISG as RADIUS Proxy in Passthrough Mode

Related Documents

Related Topic

Document Title

Cisco IOS commands

Master Command List, All Releases

ISG commands

ISG Command Reference

ISG Access for IP Subscriber Sessions

"Configuring ISG as a RADIUS Proxy" module in the Intelligent Services Gateway Configuration Guide

Standards and RFCs

Standard/RFC Title
   
   

MIBs

MIB MIBs Link
 

To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL:

http:/​/​www.cisco.com/​go/​mibs

Technical Assistance

Description Link

The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies.

To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds.

Access to most tools on the Cisco Support website requires a Cisco.com user ID and password.

http:/​/​www.cisco.com/​support

Feature Information for Configuring ISG as a RADIUS Proxy in Passthrough Mode

The following table provides release information about the feature or features described in this module. This table lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature.

Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/​go/​cfn. An account on Cisco.com is not required.

Table 1 Feature Information for Configuring ISG as a RADIUS Proxy in Passthrough Mode

Feature Name

Releases

Feature Information

Configuring ISG as a RADIUS Proxy in Passthrough Mode

Cisco IOS XE Release 3.13S

Configuring the ISG as a RADIUS Proxy in Passthrough Mode allows the Cisco Intelligent Services Gateway (ISG) acting as a RADIUS Proxy to direct all the RADIUS traffic from the client to the RADIUS server, without creating an ISG session.

The following commands were introduced: mode pass-thru and authentication method-list list-authen.