topic Re: Anyconnect Radius Question in Network Security https://community.cisco.com/t5/network-security/anyconnect-radius-question/m-p/1217200#M955278 <HTML><HEAD></HEAD><BODY><P>You can use the IETF Class value (att 25) to pass along a string to the asa, using this string, you can have the ASA to place the user on a specific group-policy that matches that string and in the group-policy you can have the tunnel-protocol svc or webvpn enabled or not. When the user that should not be connecting via anyconect receives the string and the asa places the user on the group-policy that does not have that tunnel protocol enabled, the connection will never happen. </P></BODY></HTML> Fri, 17 Apr 2009 14:17:00 GMT Ivan Martinon 2009-04-17T14:17:00Z Anyconnect Radius Question https://community.cisco.com/t5/network-security/anyconnect-radius-question/m-p/1217199#M955276 <P>I have a ASA 5510 and I'm currently using it to serve my VPN client (ipsec) users. I want to be able to also use it for the AnyConnect client but limit who can use the client to connect. I'm authenticating my users using a Windows IAS server and I push down ACLs via the AV Pair attribute. Is there a way via radius or on the ASA to specify which users are allowed to use the AnyConnect client? I need to limit access to this. I wasn't able to find anything in the documentation but I may be missing something. </P><P></P><P>Thanks for the assistance.</P> Fri, 21 Feb 2020 11:24:21 GMT https://community.cisco.com/t5/network-security/anyconnect-radius-question/m-p/1217199#M955276 dcabinet1 2020-02-21T11:24:21Z Re: Anyconnect Radius Question https://community.cisco.com/t5/network-security/anyconnect-radius-question/m-p/1217200#M955278 <HTML><HEAD></HEAD><BODY><P>You can use the IETF Class value (att 25) to pass along a string to the asa, using this string, you can have the ASA to place the user on a specific group-policy that matches that string and in the group-policy you can have the tunnel-protocol svc or webvpn enabled or not. When the user that should not be connecting via anyconect receives the string and the asa places the user on the group-policy that does not have that tunnel protocol enabled, the connection will never happen. </P></BODY></HTML> Fri, 17 Apr 2009 14:17:00 GMT https://community.cisco.com/t5/network-security/anyconnect-radius-question/m-p/1217200#M955278 Ivan Martinon 2009-04-17T14:17:00Z