per user VPN access lists using 1721 series router

marcArcher · ‎01-12-2006

I am trying to create per-user access lists for VPN clients connecting to 1721 router.

I have set aaa authorization to access my radius server & I can see the AV-pairs being returned to the router. However, they dont seem to be getting applied.

Is this scenario possible on this router ? Has anyone had any success with this scenario on this platform?

Marc

smalkeric · ‎01-18-2006

Add the aaa authorization network default tacacs|radius, debug aaa author (and the debug aaa per-user command if you are using per-user access control lists) commands with the terminal monitor command enabled and observe the access list being sent down. For RADIUS only: If the RADIUS server does not allow for attribute 11 (Filter-id) to be specified as #.in or #.out, the default is out. For example, if the server sends attribute 111, this is presumed by the router to be "111.out.