Hello Support Community,
I'm hoping that you can point me in the correct direction. I have a group of users to authenticate against a single Radius server. ASA Admins group is getting authenticated properly through Radius, the problem is that VPN employees or VPN consultants get the same access to the ASA with admin privileges. How could I differentiate between Admins and deny VPN employees or consultants access to the ASA while authenticating them for VPN access? is there an radius attribute that I can use for this?
User Groups:
1. ASA admins
2. VPN employees
3. VPN consultants
Systems:
Cisco ASA 5525 OS 9.1
Windows 2008 R2 Radius server
I appreciate any help you can provide
Thanks,
Delmiro
