Downloadable ACL

[alex goshtaei]

Hi All,

I am using ACS 4.2 with ASA 7.0. I am testing downloadable access list for remote VPN users. I've create "permit ip any any" just for testing in ACS, and setup NAF, DACL, assign DACL to the user. but when try to login from VPN client, i got this error message in ASA and login failed:

rad_procpkt: ACCEPT
RADIUS_ACCESS_ACCEPT: normal termination
Processing ACL: access-list permit ip any any
ACE error, deleting ACL: #ACSACL#-IP-dACL-4d3f1ebc
RADIUS_DELETE
remove_req 0x29f79044 session 0x6f5 id 250
free_rip 0x29f79044
radius: send queue empty

any suggestion would be very appreciated.

Thanks

Alex

[ajay chauhan]

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808cf897.shtml

Please take a look on this.

Ajay

[andamani]

Hi,

Could you paste the whole debugs you receive on the ASA.

Please do the following:

debug aaa authentication

debug radius 255

test aaa authentication host

Paste the output.

Also please attach the failed attempt reason from the ACS.

Regards,

Anisha