Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 203
  • Last Modified:

Need help with VPN group user access to distinct internal networks

I have a working 5500 that I need to modify.  I need to be able to permit specific VPN groups to access certain internal networks.  For example I want one group to be able to access 10.41.20.0/23 and another access to 10.96.11.0/24.  I still would need one admin group that access to all internal network.  Any help would be greatly appreciated.  I have read all the docs I can get my hands on and nothing seems to work.
0
Sam Lowe
Asked:
Sam Lowe
  • 2
1 Solution
 
batry_boyCommented:
access-list LimitedAccess1 extended permit ip any 10.41.20.0 255.255.254.0
group-policy LA1 attributes
 vpn-filter value LimitedAccess
tunnel-group group1 general-attributes
 default-group-policy LA1

access-list LimitedAccess2 extended permit ip any 10.96.11.0 255.255.255.0
group-policy LA2 attributes
 vpn-filter value LimitedAccess
tunnel-group group2 general-attributes
 default-group-policy LA2

You should be able to take the above code and merge it into your existing group policy and tunnel group names, but that should do it.

For your admin group, just create another tunnel group and don't apply any filtering to it.  It defaults to not having an ACL applied to a tunnel group when you create one.
0
 
batry_boyCommented:
Whoops, change the following lines in the above post:

First set of commands:

change "vpn-filter value LimitedAccess" to "vpn-filter value LimitedAccess1"

Second set of commands:

change "vpn-filter value LimitedAccess" to "vpn-filter value LimitedAccess2"

sorry about that...
0
 
Sam LoweJanitor, Fireman, MagicianAuthor Commented:
Thanks so much.  I also found the Cisco docs on the subject once you provided the correct syntax.  It was an easy find after that.  You saved me a lot of time and trouble.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now