cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Cisco Community Designated VIP Class of 2020

151
Views
5
Helpful
2
Replies

Anyconnect + ACS single client simultaneous connections limitation

Hi.

I need to limit single anyconnect user (created in ACS) by using ACL on ASA and framed ip in ACS.

Problem is when client disconnects and reconnects he get new ip address and ACL doesn't apply for this connection any more.

First connection:

Username : artemtest

Assigned IP : 10.3.3.21 (this is framed IP)

 

Second connection:

Username : artemtest
Assigned IP : 10.3.3.23 (this is not framed IP)

 

Is there a way to limit simultaneous connections? Or maybe there are some other ways to limit access to network resources for that single anyconnect user?

 

Thank you.

1 ACCEPTED SOLUTION

Accepted Solutions
VIP Rising star

Re: Anyconnect + ACS single client simultaneous connections limitation

you can configure the session limit in ACS, but it has its limitations.

from user guide

ACS 5.8 allows you to configure a maximum session limit for any user in the group; for example, each user belonging to a specific Identity Group may open not more than the session limit, no matter how many sessions other users from the same group have opened. There is no option to set up a session limit for a particular user

View solution in original post

2 REPLIES 2
VIP Rising star

Re: Anyconnect + ACS single client simultaneous connections limitation

you can configure the session limit in ACS, but it has its limitations.

from user guide

ACS 5.8 allows you to configure a maximum session limit for any user in the group; for example, each user belonging to a specific Identity Group may open not more than the session limit, no matter how many sessions other users from the same group have opened. There is no option to set up a session limit for a particular user

View solution in original post

Highlighted

Re: Anyconnect + ACS single client simultaneous connections limitation

Thank you pieterh!

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards