07-10-2009 03:08 AM - last edited on 03-25-2019 05:26 PM by ciscomoderator
Is it possible to use the ACS server to authenticate users for a few Remote Access VPN's on the same ASA ?
VPN Profile 1 => ACS group 10
VPN Profile 2 => ACS group 20
etc
Users form ACS Group 20 may not login in VPN profile 1
Regards
Remco
07-13-2009 09:55 AM
I believe you're looking for the 'group-lock' feature. Try this:
http://www.cisco.com/en/US/customer/tech/tk59/technologies_configuration_example09186a00800946a2.shtml
07-20-2009 01:18 AM
Hmm, i don't think that's the solution. I think that the ASA must send a message to the ACS server about the VPN profile group the user is connecting to. And there have to be a match in ACS database.. Am i right ?
04-22-2012 11:37 AM
Hi I've the same problem. I post here 2 month ago but no reply
Sent from Cisco Technical Support iPad App
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Log in to Community
