Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Multiple downloadable ACLs per user group in ACS

Is it possible to map multiple downloadable ACLs to a single user or user group using ASA and ACS?

For example, you have an ACL controlling access to servers (ACL A), and another ACL controlling access to internet (ACL B). Is it possible to assign multiple ACLs to a user group, such that User Group A can only access servers, while User Group B can access both servers and internet (ACL A+ ACL B)?

Thanks and regards.

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Multiple downloadable ACLs per user group in ACS

George,

The User and group settings would only allow you to select only one DACL instance at a time.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080a9eddc.shtml#configuringtheserverwitfddhias

Regards,

Jatin

Do rate helpful posts-

~BR Jatin Katyal **Do rate helpful posts**
2 REPLIES
Cisco Employee

Multiple downloadable ACLs per user group in ACS

George,

The User and group settings would only allow you to select only one DACL instance at a time.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080a9eddc.shtml#configuringtheserverwitfddhias

Regards,

Jatin

Do rate helpful posts-

~BR Jatin Katyal **Do rate helpful posts**
New Member

Multiple downloadable ACLs per user group in ACS

Ok,

I created multiple authorization profiles (each with a DACL) and attach it to an access policy result. However, only the DACL in the first authorization profile is picked. So the answer is simply, it's not possible.

Thanks for your help.

970
Views
0
Helpful
2
Replies