Configuring AAA Authentication on the PIX Firewall
PIXFirewall(config)# aaa authentication include any outside 0 0 0 0 TACACS+
PIXFirewall(config)# aaa authentication exclude http outside 0 0 192.168.1.28
255.255.255.255 TACACS+
The local-ip must be the actual IP address configured on a system without Network Address
Translation (NAT). To configure this authentication, you must ensure that you have a static
address translation or NAT configured for your local-ip but you must list the original IP
address as the local-ip.