Network Access Restriction

[jmaestrale]

I currently have a 3005 concentrator using radius authentication. I have two user groups each with different NAR's. I am having trouble restricting users that are connecting to the conc. All grouts are able to connect to the 3005, even though that device is not in their NAR.

Thanks

[gfullage]

With a VPN3000, you have to place it in the CLID/DNIS section of the NAR in ACS, not in the IP section above it. This is to do with the way the 3000 forms its Radius requests (actually never really looked into it much). Add the 3000 into that section (it's the 2nd section of the NAR in ACS) and you should be good to go.