Personal recommendation: use RADIUS or TACACS. Preferrably TACACS because Cisco is moving away from RADIUS.
If you have any Unix or Linux boxes, you can probably find a freebie TACACS / RADIUS daemon. Otherwise, for NT, you can get Cisco's CiscoSecure ACS (Access Control Server) which is pretty good RADIUS / TACACS server for around $4k which licenses unlimited devices and users. They just released ver 3.0 which will allow you to authenticate to MS Active Directory, LDAP, or several others (not Novell NDS, sorry to say). Best of luck. Brian Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=27629&t=27545 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

