VPN 3000 security

[hillegas]

The VPN concentrator has numerous locations to apply ACLS: Interface, group, users, and WebVPN. I have a simple question that I could not resolve on CCO. If I have an ACL applied to a user does this override the ACL applied to the group the user resides in or is it nested with the user ACL most significant?

-Todd

[pradeepde]

In this sample configuration, we want to use filters to allow a user to access only one server (10.1.1.2) inside the network and block access to all other resources. The Cisco VPN 3000 Concentrator can be set up to control IPSec, Point-to-Point Tunneling Protocol (PPTP), and L2TP client access to network resources with filters. Filters consist of rules, which are similar to access lists on a router. If a router was configured for:

http://www.cisco.com/en/US/tech/tk59/technologies_configuration_example09186a0080094eac.shtml