ACS Downloadable access list with PIX

[kashyapkamal]

Hi,

We have deployed ACS 1113 with 4.1 version recently in our network.

I had configured downloadable access list in ACS for remote VPN users.

But when user connects to and authenticate to ACS then the user is not able to browse internet from his PC.

Earlier user were able to access internet as split tunnel was configured in PIX.

Can we configure something similar to spilt tunnel fuctionality in ACS, so that VPN user keep will have access to internet while connected on VPN.

Thanks!

Kam

[Premdeep Banga]

Hi,

I think this might not be possible on PIX, but should be on IOS.

What you can do is, configure split tunneling, and keep it wide open, and then using DACL's restrict access.

By the way what is the version of PIX that we have, I'll look into it. Let me see it for sure.

Regards,

Prem

[kashyapkamal]

Hi,

1) 6.3 is running in PIX.

2) If i use spilt tunnel, then DACL does'nt work. Remote gets access which is allowed in access list of spilt tunnel.

If won't got your point then please get reply with little bit more detail..

Thanks!

KAmal