Controlling Access Over a Site to Site VPN based on Username and not IP

Rudy.villalona · ‎10-09-2008

We have a site to site VPN. I want to limit the users that are able to cross the tunnel based off of their username/AD account and not thier IP. I can do it by IP but Is there a way to control who can get through the tunnel by username?

I am running Cisco ASA 8.0 and ACS 4.2

singhsaju · ‎10-09-2008

Hi Rudy,

Check out following example for cut-through Proxy for network access .

PIX/ASA : Cut-through Proxy for Network Access using TACACS+ and RADIUS Server Configuration Example

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807349e7.shtml

HTH

Saju

pls rate helpful posts