Cisco ASA Firewall AnyConnect Multiple VPN Group Policy - Lock user to a VPN Group Policy

Опубликовано: 28 Сентябрь 2024
на канале: NetSpearo
808
3

Cisco #ASA Firewall #AnyConnect Multiple VPN Group Policy - #Lock user to a VPN Group Policy

ip local pool AnyConnectVPN_Server_Pool 192.168.101.1-192.168.101.254 mask 255.255.255.0
ip local pool AnyConnectVPN_Workstation_Pool 192.168.102.1-192.168.102.254 mask 255.255.255.0
object network AnyConnectVPN_Server
subnet 192.168.101.0 255.255.255.0
object network AnyConnectVPN_Workstation
subnet 192.168.102.0 255.255.255.0
access-list AnyConnectVPN_Server_Split_Tunnnel_ACL standard permit 10.254.10.0 255.255.255.0
access-list AnyConnectVPN_Workstation_Split_Tunnnel_ACL standard permit 10.254.11.0 255.255.255.0
nat (SERVER,Outside) source static any any destination static AnyConnectVPN_Server AnyConnectVPN_Server no-proxy-arp route-lookup
nat (WORKSTATION,Outside) source static any any destination static AnyConnectVPN_Workstation AnyConnectVPN_Workstation no-proxy-arp route-lookup
group-policy GroupPolicy_AnyConnectVPN_Workstation internal
group-policy GroupPolicy_AnyConnectVPN_Workstation attributes
banner value Welcome to ObeyITSpearo AnyConnect Workstation VPN
banner value
banner value **** ONLY AUTHORIZED USERS MAY USE THIS VPN SYSTEM FOR LEGITIME PURPOSES ****
dns-server value 8.8.4.4
vpn-tunnel-protocol ssl-client
split-tunnel-policy tunnelspecified
split-tunnel-network-list value AnyConnectVPN_Workstation_Split_Tunnnel_ACL
default-domain value obeyitspearo.local
group-policy GroupPolicy_AnyConnectVPN_Server internal
group-policy GroupPolicy_AnyConnectVPN_Server attributes
banner value Welcome to ObeyITSpearo AnyConnect Server VPN
banner value
banner value **** ONLY AUTHORIZED USERS MAY USE THIS VPN SYSTEM FOR LEGITIME PURPOSES ****
dns-server value 8.8.8.8
vpn-tunnel-protocol ssl-client
split-tunnel-policy tunnelspecified
split-tunnel-network-list value AnyConnectVPN_Server_Split_Tunnnel_ACL
default-domain value obeyitspearo.local
username obeyit01 password ***** privilege 0
username obeyit01 attributes
vpn-group-policy GroupPolicy_AnyConnectVPN_Server
username obeyit02 password ***** privilege 0
username obeyit02 attributes
vpn-group-policy GroupPolicy_AnyConnectVPN_Workstation
tunnel-group AnyConnectVPN_Server type remote-access
tunnel-group AnyConnectVPN_Server general-attributes
address-pool AnyConnectVPN_Server_Pool
default-group-policy GroupPolicy_AnyConnectVPN_Server
tunnel-group AnyConnectVPN_Workstation type remote-access
tunnel-group AnyConnectVPN_Workstation general-attributes
address-pool AnyConnectVPN_Workstation_Pool
default-group-policy GroupPolicy_AnyConnectVPN_Workstation