cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
409
Views
15
Helpful
3
Replies

Multiple VPN Connection for Different Profiles

LevAjar
Level 1
Level 1

Below is the scenario

  • > Client A : for VPN uses >> Cisco Anyconnect
  • > Client B : for VPN uses >> Cisco Anyconnect 

Why does it not allow in above case to continue with dual VPN connection on laptop/PC ? 

  • If you login to VPN with Client A, then can't access Client B systems
  • If you login to VPN with Client B, then can't access Client A systems 

 

What configurations needs to be updated to make it work seamless with dual Cisco Anyconnect VPN Connections ? 

1 Accepted Solution

Accepted Solutions

@LevAjar they are a couple of things you can do to achieve what you require.

- If you authenticate against ISE/RADIUS, client A is assigned a Downloadable ACL (DACL) that denies access to Client B systems and permits the other traffic. And Vice Versa, a different DACL is assigned to Client B which denies access to Client A resources and permits other traffic. Example

- Or assign a Group Policy and VPN filter to Client A, which denies access to Client B resources and permits the rest. And assign a different Group Policy and VPN filter for Client B. Example.

View solution in original post

3 Replies 3

@LevAjar they are a couple of things you can do to achieve what you require.

- If you authenticate against ISE/RADIUS, client A is assigned a Downloadable ACL (DACL) that denies access to Client B systems and permits the other traffic. And Vice Versa, a different DACL is assigned to Client B which denies access to Client A resources and permits other traffic. Example

- Or assign a Group Policy and VPN filter to Client A, which denies access to Client B resources and permits the rest. And assign a different Group Policy and VPN filter for Client B. Example.

still this not solve friend ?

LevAjar
Level 1
Level 1

@Rob Ingram / @MHM Cisco World  - Thanks for responding with options! 

I was more asking for my network/infrastructure engineers to try these options. 

Will go ahead and mark the answer as solution. Hoping it fixes! 

 

Thanks again for immediate response! Thank you! 

 

Regards,

Vels

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: