Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

Dynamic VPN Group?

We have an ASA running the latest IOS and I was wondering if there was a way to dynamically assign users to a VPN group. This is what I am trying to accomplish:

I have a MS IAS server used to authenticate users to my VPN. Users belongs to different departments by means of a different Active Directory Group. I'd like for different users to be able to only access their department VLAN network when coming in via VPN. How can I accomplish this in a secure and centrally managed fashion?

1 REPLY
Silver

Re: Dynamic VPN Group?

You cannot create contexts in ASA as it doesnt do VPN in contexts. You can create multiple groups per projects (each with diff grp name, local pool etc ) assign a VLAN per Department and restrcit access using access-lists on the VLAN.

120
Views
0
Helpful
1
Replies
CreatePlease to create content