topic Cisco ASA and downlodable acl problem in Network Access Control

Cisco ASA and downlodable acl problem

sandeep.waghchoure — Mon, 11 Mar 2019 01:40:10 GMT

HI,all

Can somebody shed some light on how to configure ACS for downloading user base acl.

We have used TACCAS for remote access user authentication.

Do I required any config on ASA or i have to just configure Policy element /authorisation profile and bind that profile with user?

thanks in advance

Cisco ASA and downlodable acl problem

camejia — Thu, 29 Dec 2011 18:29:08 GMT

Hello Sandeep,

First of all, if you are using TACACS+ for VPN Remote Access then Downloadable ACL's are not supported. You might need to change the ASA configuration to use RADIUS as the authentication protocol instead.

I am attaching a configuration example to this post.

Hope this helps.

Regards

Re: Cisco ASA and downlodable acl problem

camejia — Thu, 29 Dec 2011 18:29:46 GMT

Configuration Example.

Cisco ASA and downlodable acl problem

sandeep.waghchoure — Mon, 02 Jan 2012 12:16:02 GMT

Dear Carlos,

Thanks for reply.

That mean i have to change authentication method RADIUS for remot access vpn users and also I have to use radius for authorizaton.

Cisco ASA and downlodable acl problem

camejia — Tue, 03 Jan 2012 15:22:32 GMT

Hello Sandeep,

You are right. RADIUS includes Authentication/Authorization on the same packet which causes the authentication response from the RADIUS server to include the Authorization Attributes as well.

Regards.