Allowing VPN users acess to specific subnets

[kevinhobson2000]

Hi

Is it possible to allow specific users access to certain subnets or would i just have to create a vpn group for each user?

Regards

Kevin Hobson

[#2]

I am not sure, you can use the ACS to restrict the access for each user or the group. The CSACS from 3.x it starts supporting this feature.

[kevinhobson2000]

So you cant tie and ACL to the vpngroup specifying access?

Cheers

Kev

[jlwomeld]

You can restrict VPNUser to a subnet, you need to create a networklist and a rules and a filter that will apply yo the group you want to restrict.

[srue]

what about using downloadable ACL's with CS-ACS?

[jlwomeld]

I set the VPN Con to use rules and filter, I auth the group through the VPN Con. This is a remote user I am doing it this way so I do not have to create an username on my network. So I am not using the ACS at all. I have doc on how I did this. just e-mail me your address.

[kevinhobson2000]

Hi,

Id already figured out how to do this using group policys and vpn filters.

Thanks for the advice anyway.

Cheers

Kev