Multiple downloadable ACLs per user group in ACS

[CSCO11496083]

Is it possible to map multiple downloadable ACLs to a single user or user group using ASA and ACS?

For example, you have an ACL controlling access to servers (ACL A), and another ACL controlling access to internet (ACL B). Is it possible to assign multiple ACLs to a user group, such that User Group A can only access servers, while User Group B can access both servers and internet (ACL A+ ACL B)?

Thanks and regards.

[Jatin Katyal · Accepted solution]

George,

The User and group settings would only allow you to select only one DACL instance at a time.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080a9eddc.shtml#configuringtheserverwitfddhias

Regards,

Jatin

Do rate helpful posts-

[CSCO11496083]

Ok,

I created multiple authorization profiles (each with a DACL) and attach it to an access policy result. However, only the DACL in the first authorization profile is picked. So the answer is simply, it's not possible.

Thanks for your help.