[c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread M Callahan
We're currently using a very dated version of Cisco's Secure ACS to authenticate a relatively small group of PPPoE ADSL users. We have a planned hardware upgrade for this system, but no funding for updated ACS software. That said, I was wondering what open source alternatives folks on the list

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Phil Mayers
M Callahan wrote: We're currently using a very dated version of Cisco's Secure ACS to authenticate a relatively small group of PPPoE ADSL users. We have a planned hardware upgrade for this system, but no funding for updated ACS software. That said, I was wondering what open source alternatives

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Scott Keoseyan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 http://freeradius.org/ Scott On Aug 13, 2009, at 9:46 AM, M Callahan wrote: We're currently using a very dated version of Cisco's Secure ACS to authenticate a relatively small group of PPPoE ADSL users. We have a planned hardware upgrade for

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Kaegler, Mike
Assuming you're using TACACS+ to handle this, since radius servers are everywhere... I've been using tac_plus from http://www.pro-bono-publico.de/projects/tac_plus.html (there appear to be several projects named tac_plus, this was the first one to work well for me.) As an added bonus, the author

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Scott McGrath
Radiator RADIUS server. There are multiple versions of this software and support is available for a reasonable fee runs on Windows/Solaris/Linux Www open com au -Original Message- From: Phil Mayers p.may...@imperial.ac.uk Subj: Re: [c-nsp] Open Source Substitute for Cisco's

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Alan Buxey
Hi, Radiator RADIUS server. There are multiple versions of this software and support is available for a reasonable fee runs on Windows/Solaris/Linux with fear of pouring petrol onto a RADIUS flamewar I'd say if the original post aint got funding for ACS then free open source is pushing the

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Alan Buxey
Hi, I've been using tac_plus from http://www.pro-bono-publico.de/projects/tac_plus.html (there appear to be several projects named tac_plus, this was the first one to work well for me.) As an added bonus, the author was happy and eager to help squash a bug I ran into. It'll backend to ldap,

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Jon Lewis
On Thu, 13 Aug 2009, Alan Buxey wrote: Hi, Radiator RADIUS server. There are multiple versions of this software and support is available for a reasonable fee runs on Windows/Solaris/Linux with fear of pouring petrol onto a RADIUS flamewar I'd say if the original post aint got funding for

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Scott McGrath
Not so much - we use ACS for TACACS services and proxy the TACACS via RADIUS for some application but Cisco ACS is now an appliance and on the close order of 8K + SmartNet so you are looking at 20K $US for a new solution. RADIATOR is open-source but not 'free' it has 200+ authenticators and

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Alan Buxey
Hi, Nothing wrong with FreeRADIUS it's just you need to 'roll your own' for a lot of stuff, If your time is worth nothing or it's a hobby or experimental setup FreeRADIUS may be the better choice. But if you want someting with AD, LDAP, Kerberos, Unix, NTLM, SQL etc built in and

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Ge Moua
Yep, RADIATOR is great; we use it over here :-) Regards, Ge Moua | Email: moua0...@umn.edu Network Design Engineer University of Minnesota | Networking Telecommunications Services Scott McGrath wrote: Not so much - we use ACS for TACACS services and proxy the TACACS via RADIUS for some

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Matthew Huff
Not so much - we use ACS for TACACS services and proxy the TACACS via RADIUS for some application but Cisco ACS is now an appliance and on the close order of 8K + SmartNet so you are looking at 20K $US for a new solution. The newer version 5.0 of ACS is available only as an appliance, but

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Stephen Fulton
For PPPoE, FreeRADIUS is very worthwhile. The options the software provides on on-par with the best commercial RADIUS software. The downside? It is not GUI based (though you can write your own and link it to SQL/LDAP/etc, we have and I suspect most ISP's do) and also, it does involve a