NAC with Open VPN

[siddhartham]

We are planning to deploy NAC to inspect our remote access vpn users.Can we use NAC with open VPN or does it need to be a cisco VPN device ( ASA, PIX or VPN concentrator ).

[Eduardo Aliaga]

OpenVPN is a VPN agent, not a vpn server. You need a VPN server. Officially the vpn servers supported are ASA, PIX.

But you could use any vpn servers as long as they can send radius accounting to the NAC devices.

[siddhartham]

I think there is a OPEN VPN server also (

http://openvpn.net/index.php/access-server/overview.html)

But you could use any vpn servers as long as they can send radius accounting to the NAC devices.

--> Why do we need radius accounting, I believe its only for VPN SSO.Please let me know if I miss something

[Eduardo Aliaga]

You need Radius accounting to map the user from a particular "VPN group" to the correspondant "NAC role" (for example employees, providers, etc)

Regards