cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
454
Views
5
Helpful
1
Replies

ACS Radius AV pair

mj11
Level 3
Level 3

Hi

I was hoping someone could point me in the right direction, I am having a problem configuring AnyConnect with ASA 8.02 with Mutable groups as it seems the only way to do this is during authentication, the RADIUS server can push down the webvpn:user-vpn-group attribute. I am unable to see how to configure the ACS to use AV pairs I have enabled the Radius within the ACS but unsure on where to put the value webvpn:user-vpn-group.

Many thanks MJ

1 Reply 1

Jagdeep Gambhir
Level 10
Level 10

MJ,

You need to use radius attribute 25. It is configured in user/group setup (either place depending if you want to lock a single user, or a whole group into a tunnel group)

Regards,

~JG