How to setup ACS group policy to authenticate VPN users

[endpoint]

Hi, currently i use a ASA as VPN server that host all group policy for all VPN users. VPN users are authenticated using Active Directory and ACS. I would like to move group policy configs from ASA to ACS. I come across doc that explains how to setup VPN concentrator with ACS ( http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_tech_note09186a00800a3b88.shtml) but i am looking for examples how to setup ACS with ASA.

Any suggestions greatly appreciated.

Thanks

[ajay chauhan]

Here is what you are looking for-

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008080f2d1.shtml

Thanks

Ajay

[endpoint]

Thanks ajay fop responce but i am not looking for that type of setup; already have that in place.

I am looking to have all VPN settings done at the ACS not at the ASA level.

Eg, in Radius ACS you have attribute 026/3076/001 to restrict Access-hours. So i want to use ACs attributes to configure VPN access not the ASA. ASA must be able to redirect users to ACS to get all VPN profile attributes.

Any other suggestions?

Regards,

[ajay chauhan]

You can also edit the attributes for users- the old link i have given has got both the things users as well as acs config,

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808cf897.shtml