Calling station ID attribute needs MAC address for Anyconnect VPN client

[Parag Mahajan]

Hi All,

We are testing Anyconnect VPN users tring to connect using certificate. ASA is validating/ authenticating user based on cert and for authorization it is requesting Radius server(ISE). Currently ASA  is sending Ip address of VPN client in "calling station ID" .We want ASA to send MAC address of Anyconnect VPN client to radius server in 'calling station ID' radius attribute.  Is it possible to achieve this. Any workround ?

[edwjames · Accepted solution]

Hi Parag,

The Calling Station ID will always contain IP Address in case of Anyconnect VPN.

L3 being the cause unlike Wireless which has L2 Assoc.

Currently no workaround.

Regard

Ed

[Parag Mahajan]

Thanks Edward