[VPN] Restricting VPN 3000 user to specific servers

[Joel M Snyder]

Yes.  Put them in separate groups, and use the group lock function.  Then,
lock down the group within RADIUS.  

jms

Siddhartha Jain wrote:
> 
> Hi,
> 
> I have configured a Cisco VPN 3000 concentrator behind
> a PIX Firewall for remote users. I need to restrict
> users who land on the concentrator to specific servers
> on my LAN. The Concentrator and the servers are in the
> same LAN behind the firewall. So basically, can I put
> some access control on the concentrator to restrict
> access of users to specific IP addresses/ports within
> the network?
> 
> Regards,
> 
> Siddhartha
> 
> __________________________________________________
> Do You Yahoo!?
> Everything you'll ever need on one web page
> from News and Sport to Email and Music Charts
> http://uk.my.yahoo.com
> _______________________________________________
> VPN mailing list
> VPN at lists.shmoo.com
> http://lists.shmoo.com/mailman/listinfo/vpn

-- 
Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719
Phone: +1 520 324 0494 (voice)  +1 520 324 0495 (FAX)
jms at Opus1.COM    http://www.opus1.com/jms    Opus One
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2082 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.shmoo.com/pipermail/vpn/attachments/20021019/90f35631/attachment.bin