topic Calling station ID attribute needs MAC address for Anyconnect in Network Access Control

Calling station ID attribute needs MAC address for Anyconnect VPN client

Parag Mahajan — Mon, 11 Mar 2019 04:09:47 GMT

Hi All,

We are testing Anyconnect VPN users tring to connect using certificate. ASA is validating/ authenticating user based on cert and for authorization it is requesting Radius server(ISE). Currently ASA is sending Ip address of VPN client in "calling station ID" .We want ASA to send MAC address of Anyconnect VPN client to radius server in 'calling station ID' radius attribute. Is it possible to achieve this. Any workround ?

Calling station ID attribute needs MAC address for Anyconnect

edwjames — Sun, 08 Dec 2013 02:42:41 GMT

Hi Parag,

The Calling Station ID will always contain IP Address in case of Anyconnect VPN.

L3 being the cause unlike Wireless which has L2 Assoc.

Currently no workaround.

Regard

Calling station ID attribute needs MAC address for Anyconnect

Parag Mahajan — Mon, 16 Dec 2013 11:58:36 GMT

Thanks Edward