remote access ipsec vpn in ASA

[mnoureddine]

Hi,

How can I specify ressources in the internal network to wich authenticated users can accede using the commmand line ?

best regards,

Nour-Eddine

[Federico Coto Fajardo]

Hi,

To restrict VPN access based on VPN users you can use the vpn-filter command under the group-policy.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080641a52.shtml

Federico.

[mnoureddine]

Hi,

thank you for taking time to answer.

Your answer works with local authentication, what about authentication using an external server like ACS ??

Best regards,

Nour-Eddine

[Federico Coto Fajardo]

Even better!

You can use Radius authorization parameters to allow/disallow access based on users with an ACS.

Federico.

[mnoureddine]

By using downloadable ACL in ACS ??

Nour-Eddine

[franpena2008]

Any link or documentation related this topic?

VPN groups and ACLs defined in radius could be sent to ASA for remote VPN access control?   

Regards

Fran