Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Network Access Restriction

I currently have a 3005 concentrator using radius authentication. I have two user groups each with different NAR's. I am having trouble restricting users that are connecting to the conc. All grouts are able to connect to the 3005, even though that device is not in their NAR.

Thanks

1 REPLY
Cisco Employee

Re: Network Access Restriction

With a VPN3000, you have to place it in the CLID/DNIS section of the NAR in ACS, not in the IP section above it. This is to do with the way the 3000 forms its Radius requests (actually never really looked into it much). Add the 3000 into that section (it's the 2nd section of the NAR in ACS) and you should be good to go.

90
Views
0
Helpful
1
Replies
CreatePlease login to create content