topic Re: Restrict VPN remote user using ACS and IOS Router in Network Access Control

Restrict VPN remote user using ACS and IOS Router

ariantow123 — Sun, 10 Mar 2019 23:17:59 GMT

Hi,

I've got some problem.

I have vpn router as vpn server and also ACS to authenticate vpn remote user(cisco vpn client).

And the goal I want is to limiting user access for several ports.

I try with Filter ID, Cisco AVpair, and also downloadable ACL, but can't work.

Need your help, thx

cheerz

Nelson Rodrigues — Sat, 24 Jan 2009 03:02:19 GMT

1) HAve you checked out to make sure the format of the DACLs or Cisco-AV-Pairs are correct?

2) FilterID is the name of the access-list already defined on the VPN server.

Turn on the "debug crypto isakmp/ipsec or aaa " and see what is happening.

ariantow123 — Sat, 24 Jan 2009 03:52:34 GMT

Hi,

1. I'm sure

2. Yes, I already config the ACL on VPN router.

See the attachment for debug, sh run, and also log in ACS.

In this case, I test use DACL

Thx for your help.

ariantow123 — Tue, 27 Jan 2009 04:45:51 GMT

hi,

The link is for PIX, any other link for Cisco IOS Router ?

Is it applicable in Cisco router ?

thx