ā01-16-2024 05:42 AM
Hi
How can i assign a policy group to a user in a router?
So i will assign a policy to a group of members and an other group to other members. There are differesnt acl for different services.
br
webvpn context SSL_Context
gateway SSLVPN_GATEWAY
!
ssl authenticate verify all
inservice
!
policy group SSL_Policy
functions svc-enabled
timeout idle 300
svc address-pool "SDM_POOL_1" netmask 255.255.255.0
svc split include acl 1
default-group-policy SSL_Policy
Solved! Go to Solution.
ā01-16-2024 06:28 AM
ā01-16-2024 06:44 AM
Should be
aaa authorization network WebVPN local
aaa attribute list AssignPolicy1
attribute type user-vpn-group "SSL_Policy1"
aaa attribute list AssignPolicy2
attribute type user-vpn-group "SSL_Policy2"
username user1 password 0 cisco
username user1 aaa attribute list AssignPolicy1
username user2 password 0 cisco
username user2 aaa attribute list AssignPolicy2
webvpn context SSL_Context
aaa authorization list WebVPN
...
policy group SSL_Policy1
...
policy group SSL_Policy2
...
ā01-16-2024 05:48 AM
@Raimund Schimanovits what authentication method are you using? The best way to achieve this is using RADIUS where you can send the specific settings (ACL, address pool) based on the user's group membership.
ā01-16-2024 06:03 AM
i have only 3 members so i use local authentication.
br
ā01-16-2024 06:27 AM
Check group-lock option
We use it for asa ssl ra vpn and I think it also available in router IOS.
MHM
ā01-16-2024 06:28 AM
ā01-16-2024 06:44 AM
Should be
aaa authorization network WebVPN local
aaa attribute list AssignPolicy1
attribute type user-vpn-group "SSL_Policy1"
aaa attribute list AssignPolicy2
attribute type user-vpn-group "SSL_Policy2"
username user1 password 0 cisco
username user1 aaa attribute list AssignPolicy1
username user2 password 0 cisco
username user2 aaa attribute list AssignPolicy2
webvpn context SSL_Context
aaa authorization list WebVPN
...
policy group SSL_Policy1
...
policy group SSL_Policy2
...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide