VPN Gateway with Kind of Restriction

[Ibrahim Jamil]

Hi Experts

i have asa 5520 configured as VPN Gateway to terminate remote access vpn , i have question , how can i restrict the access to only 1 range of public source IPs to access my corporate via RA ,is this possible?if so how to configure it?

thanks

[Julio Carvajal]

Hello Ibrahim,

The trick here is that the ASA will reply to any ISAKMP request attempt so that being the case you will need to configure an ACL and apply it to the control plane ( not the outside interface).

This will also affect other VPN connections so think about it!

Remember that the ACS also restricts source IP for VPN for a certain group.

Regards,

Julio

CSC it's a free support community take your time to rate all the engineer's responses that help you resolving your problems.