VPN authentication & Authorization.

[bicky1976]

                   How much ...... it is usable with authentication and authorization with ACS having TACACS+ Server. SSL is worse in this case.....?

Is ACS having such support with TACACS+ for VPN policy assigements....?

[Marcin Latosiewicz]

http://www.cisco.com/en/US/docs/security/asa/asa90/configuration/guide/aaa_servers.html#wp1052971

tacacs is not supported for authorization of VPN users.

[Jatin Katyal]

Hi Bikram,

That's right. Tacacs wouldn't help you with authorization for vpn users. Since you'd like to assign group-policy based on user's group/identity. This can only be possible with RADIUS or LDAP. SInce you'd like to configure this with ACS so the first link would work for you.

Configure ACS to Assign a Group Policy at Login using RADIUS

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808cf897.shtml

PIX/ASA 8.0: Use LDAP Authentication to Assign a Group Policy at Login

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808d1a7c.shtml

Please feel free to let us know if you need some additional configuration.

~BR
Jatin Katyal

**Do rate helpful posts**