VPN Restriction in ASA OS 8.22

Hi Team,

Is there a way I can make something inside the ASA so that one user just can
log in to a single group :

group-policy CISCO-ENG internal
group-policy CISCO-ENG attributes
 vpn-simultaneous-logins 1
 vpn-idle-timeout 30
 vpn-session-timeout 120
 ipsec-udp enable
 split-tunnel-policy tunnelall
 default-domain value dfg.com
 secure-unit-authentication enable
 user-authentication enable
 user-authentication-idle-timeout 10
 address-pools value POOCISCO-ENG
!
tunnel-group CISCO-ENG type remote-access
tunnel-group CISCO-ENG general-attributes
 authentication-server-group RADIUS
 authentication-server-group (outside) RADIUS
 accounting-server-group RADIUS
 default-group-policy RAS_test
tunnel-group CISCO-ENG ipsec-attributes
 pre-shared-key *****
!

Right now any user can log in to any group, this is not wat I want.

Thanks

Regards

Blogs and organic groups at http://www.ccie.net
Received on Fri Mar 19 2010 - 13:45:41 ART