topic Re: Downloadable ACL in Network Access Control

Downloadable ACL

alex goshtaei — Mon, 11 Mar 2019 00:45:20 GMT

Hi All,

I am using ACS 4.2 with ASA 7.0. I am testing downloadable access list for remote VPN users. I've create "permit ip any any" just for testing in ACS, and setup NAF, DACL, assign DACL to the user. but when try to login from VPN client, i got this error message in ASA and login failed:

rad_procpkt: ACCEPT
RADIUS_ACCESS_ACCEPT: normal termination
Processing ACL: access-list permit ip any any
ACE error, deleting ACL: #ACSACL#-IP-dACL-4d3f1ebc
RADIUS_DELETE
remove_req 0x29f79044 session 0x6f5 id 250
free_rip 0x29f79044
radius: send queue empty

any suggestion would be very appreciated.

Thanks

Alex

Re: Downloadable ACL

ajay chauhan — Fri, 04 Feb 2011 13:49:46 GMT

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808cf897.shtml

Please take a look on this.

Ajay

Re: Downloadable ACL

andamani — Fri, 04 Feb 2011 14:07:18 GMT

Hi,

Could you paste the whole debugs you receive on the ASA.

Please do the following:

debug aaa authentication

debug radius 255

test aaa authentication host

Paste the output.

Also please attach the failed attempt reason from the ACS.

Regards,

Anisha