Restricting Access to a Group to Certain Devices Not in a NDG

[gerardwest]

I'm trying to setup our ACS servers so that users assigned to a certain group can access certain routers from anyway. These routers, approx. 10, are in different NDGs. Can I list these routers in the group's settings as the only routers member in this group can access?

[gfullage]

Sure, you'll just have to add them in one-by-one if they're not all in one NDG, but that's fine.

In the group, under the Network Access Restrictions section, under Per Group Defined Network Access Restrictions check the Define IP-based restrictions box. Table defines the Permitted calling points, then in the table below that add in each router one-by-one, use * for Port and Address. Submit and Restart and off you go, users in this group will only be able to authenticate to the devices you've added to the table.

[gerardwest]

When I first tried this I was entering a port number and ip addr. With the * in both fields the access works as I need it to. Many thanks!!!