User based portal on Cisco ASA (SSL VPN)?

[alig.norbert]

Hi all,

I am looking for a solution, that different portals (WEBVPN) can be assigned to different users.

E.g. :

- user "test1" logs in and see the "portal-1"

- user "test2", "test3" log in and see the "portal-2"

I know, it can be done with the alias entry for each portal, but I want a transparent solution for the user (Like Juniper SA2000).
Furthermore it should be possible to authenticate through RADIUS (no local authentication on the ASA).

Who has done such a set up?

Thanks,

Norbert

[Yudong Wu]

I think you can use the group policy.

For example,

You can create two different group policy and customize the portal for each respectively.

Then when user1 login, Radius can reture the attribute to let ASA know when group user1 is belong to and correspond web portal will be launched accordingly. user2 and use3 will be mapped to the other group based on their radius attribute and the related web portal will be launched.

Not sure if this is what you are looking for.

[alig.norbert]

Hi,

that's what I'm looking for, BUT which attribute must be set on the RADIUS to let the ASA know that this particular user belongs to the particular

group (VPN-Group)?

Thanks,

Norbert

[andamani · Accepted solution]

Hi,

The attribute 25 (It's called "Class") and assign it the  value of ou=MyVPNGroupPolicy   where MyVPNGroupPolicy is the  name of your group policy in the ASA.

Hope this helps.

Regards,

Anisha

P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.

[alig.norbert]

Great,

That was what I was looking for.

Thanks,

Norbert