VPN Group Authentication using TACACS

[amjain2]

Hi

I have VPN clients coming into a router and getting x-authenticated using TACACS/ACS 3.0. Till now I was using local group authetication. My requirement is to only allow specific user to authenticate on vpn and not all users in ACS database. I believe this can be done if I setup the group authentication also in ACS. Can you please share docs on how to set it up.

Thanks

[didyap]

You need to create a new group for VPN users in the ACS so that these users will only be able to authenticate. Following link may help you

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.0/user/guide/g.html