i´d want to do a rule in group matching option, in vpn3030, that checks the field "subject alternative name", but, for my surprise, it doesn´t have this option to configure in the concentrator, because it follows the X.520, not X.509, pattern.sb know...

Is it possible to use digital certificates to communicate a cisco vpn client 4.0 to a vpn 3000, using ACS (radius) for authentication? If yes, could anyone tell me what to configure in ACS?! I look for this in the net but I find just the configuratio...