cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
431
Views
0
Helpful
2
Replies

Group-lock on IOS router with Microsoft IAS

guibarati
Level 4
Level 4

How can I lock the group an user can login using a 2811 router and Microsoft IAS?

I have seen there is an "group-lock" command inside the client group configuration, when I configure that i?m not able to connect to VPN anymore. What does the router compares with what for making a match?

2 Replies 2

tstanik
Level 5
Level 5

To lock users of a particular group the only way to perform Radius type group locking on a router, is with an EzVPN server configuration. Following link may help you

http://www.cisco.com/en/US/products/sw/secursw/ps5318/products_user_guide_chapter09186a00806560eb.html#wp1110507

guibarati
Level 4
Level 4

What I need to do was remove the "default policy" under the contexts and make the ms IAS return the cisco AV-pair webvpn:user-vpn-group="policy name"

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: