Simultaneous Login VPN

[vita_user]

Hello,

in ACS there is a configuration with radius request "simulataneous login=1". If I hold a vpn session for a time x another user (X) can login with the same user data during the connection. After user (X) is connected and my active session was canceled (by another user). The active session changed to user (X).

In ACS I give authentication request "Radius Cisco VPN3000/ASA/PIX7.xSimultaneous-Logins=1". Is there a way to deny the connection for user (X) during an existing vpn session? What is the option or request in ACS?

Thx for help!

[Ahmad Murad]

Hi,

You have an option on the ASA itself to prevent this by using "vpn-simultaneous-logins" under the group-policy assigned to the tunnel group or the username.

You can configure it to have 1,2,3, or more session per username.

Thanks.

Sent from Cisco Technical Support iPad App

[vita_user]

Thx for your answer!

By this option the user takes away its own existing session f.e. from another PC. That should not happen...