Solved

How to configure IAS in Server 2003 to configure a Radius server for use with Cisco VPN Concentrators

Posted on 2011-02-15
4
775 Views
Last Modified: 2012-06-21
Currently I have a three Cisco VPN Concentrators that are load balanced.  I have a Windows 2003 server for my Radius server.  This allows users to log in to the Cisco VPN Client with their Active Directory User name and password.  This is my question.  Is there anywhere in the Cisco Concentrator or the IAS Server that will allow for example "John Doe" to only be able to log in once.  What I'm trying to prevent is the same user logging in multiple times.  When I look in the concentrator and go to the general tab of the group, there is an option for Simultaneous Logins, but this is for simultaneous logins for this group, not per user.  Is there a way to accomplish what I am trying to do?  Thanks.
0
Comment
Question by:denver218
  • 2
  • 2
4 Comments
 
LVL 3

Expert Comment

by:mikegatti
ID: 34910479
inside your default group policy you can add the command:

group-policy DfltGrpPolicy attributes
 vpn-simultaneous-logins 1

that should stop users from simultaneous logins

Also, on the IAS side there is nothing to do (as far as I know), we are evaluating replacing our RADIUS solution with CISCO ACS, OCS RADIATOR or another vendor.

-------------------------------------
vpn-simultaneous-logins

To configure the number of simultaneous logins permitted for a user, use the vpn-simultaneous-logins command in group-policy configuration mode or username configuration mode. To remove the attribute from the running configuration, use the no form of this command. This option allows inheritance of a value from another group policy. Enter 0 to disable login and prevent user access.


http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/uz_72.html#wp1413067


0
 
LVL 4

Author Comment

by:denver218
ID: 34911080
Thanks but this seems to be for a ASA.  I'm am using a cisco VPN concentrator 3060.
0
 
LVL 3

Accepted Solution

by:
mikegatti earned 500 total points
ID: 34911691
No problem, navigate Configuration>User Managemtn>Groups, select a group in the list and click on  on modify group, click the General tab of you vpn group,  there is an option Simultaneous Logins, you can set that option to 1. Or you can go in your Base group and set that option to 1 and it will apply to all groups
0
 
LVL 4

Author Closing Comment

by:denver218
ID: 34916734
Thanks
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
Like many organizations, your foray into cloud computing may have started with an ancillary or security service, like email spam and virus protection. For some, the first or second step into the cloud was moving email off-premise. For others, a clou…
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question