|
Posted by Marlon Brown on May 11, 2006, 5:19 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I have students and staff AD accounts.
Students should be allowed to access wireless (Cisco LEAP).
Staff accounts should be allowed to access VPN and wireless.
Both Student and Staff Active Directory accounts have the option "Dial-in"
tab set to "Allow".
Problem:
Since that option "Allow" is enabled, students could install and launch VPN
client and get connected thru VPN. I don't want that.
Question:
What would be the best way to create a policy to allow the access to
wireless, not VPN ?
Note that I am using Cisco ACS to control the authentication between the VPN
system, Wireless and Active Directory. VPN concentrator is Cisco 3000.
| 
XML site map