topic VPN AAA for specific radius users in Network Access Control

VPN AAA for specific radius users

Frank Hohenadel — Mon, 11 Mar 2019 05:11:22 GMT

Hi,

we are running a 2911 router with radius authentication for SSL as well as for VPN access. Is there a possibility to grant only specific users (out of the radius DB) access to the server ?

Thanks, Frank

Hi Frank. A couple of

nspasov — Tue, 18 Nov 2014 04:45:12 GMT

Hi Frank. A couple of questions:

- What are you using for Radius server

- Confirm with me that I have your requirements understood: You are trying to restrict certain users, located in the Radius database from accessing some server on your network?

Thank you for rating helpful posts!

Hi Neno,the radius server is

Frank Hohenadel — Tue, 18 Nov 2014 08:43:50 GMT

Hi Neno,

the radius server is located within an Synology NAS (as Synology packet). The NAS itself is located inside the network.

My requirement is to limit the SSL VPN access to certain users located in the radius database.

Thanks, Frank

Ah ok, so that will be

nspasov — Tue, 18 Nov 2014 17:18:42 GMT

Ah ok, so that will be configuration change inside your Radius server. I personally have never worked with Synology based Radius before but have done this with Cisco ACS, ISE and Microsoft NPS. In all three of those I was able to create a policy where only users located in "X" identity group were allowed to VPN in. I know I am oversimplifying it but it really isn't that bad...I just can't give you an example since I haven't worked with your type of Radius before 🙂

Hope this helps!

Thank you for rating helpful posts!