VPN 3000 & Cisco ACS

[kendo.igor]

I'm using a VPN 3015 to provide remote access into our LAN. Cisco Access Control Server (ASC) is used for authentication of the VPN Clients.

How can I restrict some VPN clients coming in through the VPN to be able to access only certain servers (By IP Address) on the LAN and not the entire LAN?

Thanx

[ssoberlik]

You’re authenticating them now with your ACS now you need to enable Authorization to give specific permissions to the authenticated users. Walk through it your first time with a Cisco TAC person. Here’s some useful links too:

http://www.cisco.com/pcgi-bin/Support/PSP/psp_view.pl?p=Software:Cisco_Secure_ACS_NT

http://www.cisco.com/pcgi-bin/Support/PSP/psp_view.pl?p=Software:Cisco_Secure_ACS_NT&s=Implementation_and_Configuration#Samples_%26_Tips