access-list VPN users

[e-mourad]

Hi,

Please, can i put an access-list to deny/permit for a such vpn client to access servser. or must i put it on the "ipsec rules".

Ex: access-list outacl permit ip 10.1.198.0 10.1.32.0

vpnpool : 10.1.198.0

servers : 10.1.32.0

thanks

[ozgur.guler]

you should remove

sysopt connection permit-ipsec

sysopt ipsec pl-compatible

commands for such an access-list to have any effect.