Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi Experts
Currently, I am working on ZBFW configuration which is applied using 2 zones. one zone is a VT interface and another is Cisco CSR gig2 for outside traffic interface.
Using AnyConnect Client a FlexVPN tunnel is configured on VT interface ...
Hi Experts,
I am using Cisco IOS XE Software, Version 16.08.01 image and doing remote authorization for flexvpn using per user(email) based authorization policy as shown below.
crypto ikev2 authorization policy [email protected] ACPOOL-LQL4M8F1ED...
Hi Experts,
I need help in configuring an ikev2 profile for VRF to restrict other VRF users.AnyConnect Client 4.5 is using FlexVPN using AnyConnect-EAP authentication with an IKE ID for matching remote key identity.Also, we are using a local AAA data...
Hi Experts,
The flex tunnel authorization works with the existing authorization policy which is applied in Ikev2 profile with the authorization group. Now I want to add a name-mangler with the authorization group but it failed to accommodate both i...
Thanks, RJI.
But on CSR 16.08 I am having below options only-
99d0155b-744b-4d50-88b4-0d7fe1f620bb#show policy-firewall stats ?global Global statisticsplatform Firewall Platform Informationvrf vrf statisticszone zone statistics
I tried with the vrf ...
Hi RJI, great to see you here again.yeah .. external RADIUS/TAC server could be a better option but as we have some device limitation and we can use only aaa local authentication and authorization on CSR
Hi RJI,Do you have any idea on authorization prohibition/restriction? Can we restrict based on authorization by creating any user group per VRF in local AAA
