topic Simultaneous Login VPN in Network Access Control

Simultaneous Login VPN

vita_user — Mon, 11 Mar 2019 04:19:08 GMT

Hello,

in ACS there is a configuration with radius request "simulataneous login=1". If I hold a vpn session for a time x another user (X) can login with the same user data during the connection. After user (X) is connected and my active session was canceled (by another user). The active session changed to user (X).

In ACS I give authentication request "Radius Cisco VPN3000/ASA/PIX7.xSimultaneous-Logins=1". Is there a way to deny the connection for user (X) during an existing vpn session? What is the option or request in ACS?

Thx for help!

Re: Simultaneous Login VPN

Ahmad Murad — Thu, 23 Jan 2014 20:22:27 GMT

Hi,

You have an option on the ASA itself to prevent this by using "vpn-simultaneous-logins" under the group-policy assigned to the tunnel group or the username.

You can configure it to have 1,2,3, or more session per username.

Thanks.

Sent from Cisco Technical Support iPad App

Simultaneous Login VPN

vita_user — Mon, 27 Jan 2014 08:30:08 GMT

Thx for your answer!

By this option the user takes away its own existing session f.e. from another PC. That should not happen...