ASA WEBVPN Simultaneous logins issue

[Palazsto]

Hi Guys,

I have the following problem to solve :

On ASA device with webvpn configured on it I want to filter the possible simultaneous logins based on a username.Is this possible at all ?

For example all users should have one simultaneous session possible and only one user should have more - 20 for exmaple.There is also LDAP configuration on the ASA.

What about RADIUS integration ?

[Rahul Govindan]

Yes, you can do this in multiple ways depending on the type of auth you use.

For local user, you can individually change the vpn-simultaneous-login attribute for that user to 20.

username testuser password xxxxx privilege 5
username testuser attributes
 vpn-simultaneous-logins 20

If is an LDAP or Radius user, you can either use LDAP attribute map or Radius group-policy mapping feature to map the user to a different group-policy. Inside the group-policy, you can set the vpn-simultaneous-login attribute to 20. You can put the user in a separate AD group to differentiate him/her between other users.