Skip to main content
theglossy1
theglossy1
New Member
July 6, 2016
Question

Differentiating Cisco client types

  • July 6, 2016
  • 1 reply
  • 3058 views

I would like to have a different policy for IPSec clients versus AnyConnect SSLVPN clients. Cisco has a VSA for this (see here) but I'm having trouble figuring out how to bring that into the FortiAuthenticator. I go to Authentication -> RADIUS Services -> Clients, I choose my client and select "Apply this profile based on RADIUS attributes." However, I need Vendor ID 3076 with type 150. Since I don't see it there, I guess I would need to add a custom one. Unfortunately, custom is not one of the options.

 

Is there a way to add your own vendor ID with vendor attribute? I see there is an option for "Vendor-Specific" with a value to put in. Is there a way to format that such that it translates to 3076,150,2 (VendorID,AttributeID,Client-Type)?

 

Thanks.

    1 reply

    xsilver_FTNT
    Staff
    xsilver_FTNT
    Staff
    August 8, 2016

    Hello, It seems to me that you would like to differentiate and apply different profiles for a single RADIUS Client, via option "Apply this profile based on RADIUS attributes." and specific profiles distinguished by Cisco/Client-Type AVP.

    I do not found it in between supported Cisco AVPs on FortiAuthenticator 4.1.1 build 0081.

    Therefore I would suggest to use another AVP if possible.

     

    Kind regards, Tomas

    Terms & ConditionsAccessibility statement