Authentication Proxy Configuration on the Router

Configuring authentication proxy on a firewall router involves using three variations of the ip auth-proxy command in the Global Configuration mode. Then, the same ip auth-proxy command is used in the Interface Configuration mode to apply the rule to the interface. The variations include the following commands:

• ip auth-proxy auth-cache-time

• ip auth-proxy auth-proxy-banner

• ip auth-proxy name

• ip auth-proxy (interface configuration)

Remember, the aaa authorization auth-proxy command, covered earlier, is used together with the ip auth-proxy name command covered in this section. The former enables the AAA auth-proxy feature, while the latter defines the specific rules to apply. Together, these two commands create the authorization policy to be used by the firewall.