Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

RA VPN Client restriction using MAC address

I want to restrict RA VPN access to firewall based on MAC address of the client.Basically we want to only allow remote users connect with their work laptop and not from their home PC for instance.  I am using 8.4 ASA5510.

If such option is available please also share the link of how to configure it?

I have read few blogs,they say it cannot be done,but we can use Certificate based authentication and map MAC address to Certificate. If this is how it works,can you provide a link of how to configure it ?

1 ACCEPTED SOLUTION

Accepted Solutions
VIP Green

You could use Dynamic Access

You could use Dynamic Access Policies and match on the MAC address and then specify what happens when a match is made...or not matched.

http://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/security_manager/4-1/user/guide/CSMUserGuide_wrapper/ravpnpag.html#wp41993

here is a deployment guide:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/108000-dap-deploy-guide.html

--

Please remember to select a correct answer and rate helpful posts

--

Please remember to rate and select a correct answer
2 REPLIES
New Member

Anyone,please suggest on this

Anyone,please suggest on this.I need it ASAP

VIP Green

You could use Dynamic Access

You could use Dynamic Access Policies and match on the MAC address and then specify what happens when a match is made...or not matched.

http://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/security_manager/4-1/user/guide/CSMUserGuide_wrapper/ravpnpag.html#wp41993

here is a deployment guide:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/108000-dap-deploy-guide.html

--

Please remember to select a correct answer and rate helpful posts

--

Please remember to rate and select a correct answer
103
Views
0
Helpful
2
Replies
CreatePlease login to create content