VPN PPTP Authorization with ACS

[ludwig.morales]

I have a PIX 525 runing 6.3.1 sofware and i'm trying to restrict access to certain users accessing my internal network trough VPN (VPND) i've been able to authenticate users but authrization with downloadable acls configured on the acs 3.1 using radius dont seem to work.

is there any other way to control incoming trafic?

[jsivulka]

Please see bug CSCdy84724 'per-user / downloadable ACLs with RADIUS for L2TP/PPTP'. As per the bug PIX currently does not support the per-user access lists in any form, if the PPP-style protocols (PPTP or L2TP) are used.

[scoclayton]

Hi, this should be fixed/implemented in 6.3(1) code per CSCdy84724 - per-user / downloadable ACLs with RADIUS for L2TP/PPTP. What does a 'sh uauth' display when you are connected via PPTP or L2TP?

Scott

[ludwig.morales]

HI!!

This bug was supposed to be fixed in the 6.3(1) or so said the person that assisted me with a similar case.

It was not until i recived a 6.2(2)131 versionn straight from the TAC that i was able to do this, ask them in case you need it or contact me.

Regards,

Ludwig