Sending "tunnel-group" name from Cisco ASA to Cisco ACS 5.2?

[CCL Network Services Group]

Is it possible to send this and how to evaluate it on Cisco 5.2 to selectivily route the Access-request to a specific identity store

[Herbert Baerten]

Hi again Tony,

just to get this question off the "unanswered" list: this would also fall under the enhancement I mentioned in the other thread:

CSCsw31922    Radius upstream VSAs (Tunnel Group,Client type) for VPN policy decisions

hth
Herbert
--
If this post answers your question, please click the "Correct Answer" button

[jan.nielsen]

I am having the same issue, none of the values i can see and use in DAP, like tunnel-group name, are sent to my ACS 5.2, so i can't use ACS for policy decisions. Are you saying that this is not supported ???

[Herbert Baerten]

Hi Jan,

yes that's correct.

CSCsw31922 is an enhancement request to add this functionality to ASA. It is currently in "O" (Open) state which means it is being worked on, but there is no ETA. For more information I would suggest to contact your local Cisco sales team.

hth

Herbert