PIX PPTP vpn with ACS server for authentication and authorization.

[gsatchivi]

Has anyone ever used ACS for user authentication and authorization in conjunction with PIX pptp vpn? I am trying to work out a vpn solution that will use one pix and an ACS server. Based on access lists and profile, different users would be allowed access to different resources on the network through the PIX. Can this concept be implemented? So far I have not seen any doc on CCO that detailed such a set up. I just want to confirm before I even start to configure the ACS server.

Thanks

[Nairi Adamian]

At the moment assigning ACL on per-user basis is not a supported feature on the PX for PPTP connections.

There is an enhancement request bug open for this. The bug ID is CSCdw95564.

Hope this helps,

-Nairi

[gsatchivi]

Thanks Nairi. I am assuming that this feature is not supported for group profile either. Am I correct? Is there any other cisco solution that you know of which support what I am trying to do with PIX and PPTP?

Thanks

Gilles

[Nairi Adamian]

You assign ACL if you are using xauth with a vpn client on the pix. But unfortunately not with PPTP.

Regards,

-Nairi