Cisco Cisco IOS Software Release 12.4(6)T
Tag and Template
ip auth-proxy name
20
Cisco IOS Security Configuration Guide
ip auth-proxy name
To create an authentication proxy rule, use the ip auth-proxy name command in global configuration
mode. To remove the authentication proxy rules, use the no form of this command.
mode. To remove the authentication proxy rules, use the no form of this command.
ip auth-proxy name auth-proxy-name {ftp | http | telnet} [inactivity-timer min] [absolute-timer
min] [list {acl | acl-name}] [service-policy type tag {service-policy-name}]
no
ip auth-proxy name auth-proxy-name
Syntax Description
Defaults
The default value is equal to the value set with the ip auth-proxy auth-cache-time command.
Command Modes
Global configuration
Command History
auth-proxy-name
Associates a name with an authentication proxy rule. Enter a name of
up to 16 alphanumeric characters.
up to 16 alphanumeric characters.
ftp
Specifies FTP to trigger the authentication proxy.
http
Specifies HTTP to trigger the authentication proxy.
telnet
Specifies Telnet to trigger the authentication proxy.
inactivity-timer min
(Optional) Overrides the global authentication proxy cache timer for
a specific authentication proxy name, offering more control over
timeout values. Enter a value in the range 1 to 2,147,483,647. The
default value is equal to the value set with the ip auth-proxy
command.
a specific authentication proxy name, offering more control over
timeout values. Enter a value in the range 1 to 2,147,483,647. The
default value is equal to the value set with the ip auth-proxy
command.
Note
This option deprecates the auth-cache-time min option.
absolute-timer min
(Optional) Specifies a window in which the authentication proxy
on the enabled interface is active. Enter a value in the range 1 to
65,535 minutes (45 and a half days). The default value is 0 minutes.
on the enabled interface is active. Enter a value in the range 1 to
65,535 minutes (45 and a half days). The default value is 0 minutes.
list {acl | acl-name}
(Optional) Specifies a standard (1–99), extended (1–199), or named
IP access list to use with the authentication proxy. With this option,
the authentication proxy is applied only to those hosts in the access
list. If no list is specified, all connections initiating HTTP, FTP, or
Telnet traffic arriving at the interface are subject to authentication.
IP access list to use with the authentication proxy. With this option,
the authentication proxy is applied only to those hosts in the access
list. If no list is specified, all connections initiating HTTP, FTP, or
Telnet traffic arriving at the interface are subject to authentication.
service-policy type tag
(Optional) A control plane service policyis to be configured.
service-policy-name
(Optional) Control plane tag service policy that is configured using
the policy-map type control tag {policy name} command, keyword,
and argument. This policy map is used to apply the actions on the host
when a tag is received.
the policy-map type control tag {policy name} command, keyword,
and argument. This policy map is used to apply the actions on the host
when a tag is received.
Release
Modification
12.0(5)T
This command was introduced.
12.2
Support for named and extend access lists was introduced.