regulate Vpn clients permission

mcelec · ‎02-20-2008

Hi,

I have Pix with some vpn clients configured, it is working fine, but the crypto list permissions has total IP access, I need to implement permissions only to my Server with a specific port, but, if I do that, I lost the vpn clients access.

Please, can somebody help

Martin

brettmilborrow · ‎02-29-2008

Can you post the relevant portions of your config...

mcelec · ‎03-03-2008

Thanks Brett,

that is my current configuration, thing is, I need to implement two VP-groups, firts one has total access (172.20.1.0), then, I need the second one with limited access(172.25.1.0), I need that pool access the server(192.168.1.1 only with 1433 port.

can you help me please?

Martin

mcelec · ‎03-03-2008

that is the conf

brettmilborrow · ‎03-04-2008

The cisco recommended method to achieve this is to use split tunneling. This method will work, but does introduce the risk of access between a users local (potentially unsafe) network to your LAN whilst connected to the VPN.

You would need to configure your device similarly to this:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806ab788.shtml