topic Re: VPN Access Control Policy in Network Access Control

VPN Access Control Policy

Arif — Fri, 21 Feb 2020 19:09:17 GMT

Hi;

I want to set Access Control policy for VPN on ASA 5516-X .

I think make this settings, are they true ?

Source Zone : Outbound

Destination Zone : Inbound

Source Network : VPN Network

Destination Network : File Servers Network

Ports: ? (I want to use IKEv2-IPsec Protocols, what port must I open)

Additional Question :

I install Radius for AAA, is this requires add a policy for this thanks...

Rob Ingram — Tue, 03 Sep 2019 13:32:37 GMT

Hi,

You don't have to open any ports for IPSec, but you do need to configure the ASA to enable ikev2 on the outside interface.

Which OS image are you using FTD or ASA?

Here is an example of Remote Access VPN using FTD or ASA both examples are integrated with a RADIUS server (ISE).

HTH

Arif — Tue, 03 Sep 2019 14:55:41 GMT

Hi;

Our Os is : Cisco Fire Linux OS

Rob Ingram — Tue, 03 Sep 2019 15:03:48 GMT

Ok, so you are using FTD image then.

Reha Kucukosmanoglu — Wed, 04 Sep 2019 14:28:33 GMT

Thank RJI for usefull information.