Yes and no. The ACL isn't downloaded to the VPN client itself, it is downloaded to the ASA and enforced at that point. It's pretty simple, and here are the references.
http://www.cisco.com/en/US/partner/docs/security/asa/asa80/configuration/gui de/fwaaa.html#wp1043588 And: http://www.cisco.com/en/US/partner/docs/security/asa/asa80/configuration/gui de/vpngrp.html#wp1133080 Sorry for the partner links, but you can do your own search. It's all in the configuration guides. I know it sounds simple, but just download the command line configuration guide, and read it. Fred Reimer, CISSP, CCNP, CQS-VPN, CQS-ISS Senior Network Engineer Coleman Technologies, Inc. 954-298-1697 > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:cisco-nsp- > [EMAIL PROTECTED] On Behalf Of Arne Larsen / Region Nordjylland > Sent: Sunday, May 04, 2008 3:53 AM > To: [email protected] > Subject: [c-nsp] Downloadale acl for ASA-pix to VPN-clients > > Hi All. > Is it possible via RADIUS to download access-list to a vpn client that > is connecting to an ASA-firewall, so that the clients are restricted > separately. And how is it done. > Any links or example would be appreciated. > > /Arne > > > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
