07-14-2003 05:35 AM - edited 02-21-2020 12:39 PM
On the Cisco 3005 you can assign a locally defined filter to an local user. Since i'm using Radius for authentication and authorization, i would like to assign the filter from there.
Unfortunately i couldn't find a corresponding CVPN-3000 attribute for this. Is this really not supported or did we miss something ?
best rgds
Karel
07-21-2003 07:25 AM
On the cisco VPN concentrators, using the Radius server you can restrict only URL's and you cannot administer the traffic thats flowing through.
07-21-2003 10:18 PM
Okay, i found the solution. It can be done with the Cisco-AVPair attribute oder the Filter-Id. If you use Filter-Id you have to define the ACL on the Concentrator. If you use Cisco-AVPair "ip:inacl#1=permit ...." you can assign the ACL from the Radius, which scales a bit more if you have several concentrators. Thanks anyway
best rgds
Karel
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide