Problems with ACS not Authenticating 3rd parties through VPN concetrator

[darrengrey]

Hi all

I have recently moved from ACS V3.2 to V4.0 this has not been without it's challanges and has not been as seemless as I expected.

The main issue we have is our 3rd party access from our Cisco 3000 VPN concentrator.

The problem I am having is under the section Group Mappings for Domain -

I have Selected my NT Group and Selected my Cisco Secure Group.

When my third parties try to connect under failed attempts I get this error -

DACL request from device is not acceptable

However when I change the Cisco Secure Group to DEFAULT - I get authenticated.

I have spent hours trying to figure this out does anyone have any ideas.

Thanks in Advanced

[Vivek Santuka]

Hi,

Do you have the proper Downloadable ACL configured in the group ?

It looks like ACS is rejecting the DACL request made by the Concentrator.

Regards,

Vivek