Auto add users to a vpn group

[arae]

Hi all,

I have to VPN groups that have different DNS servers when connected. Is there a way to configure the firewall so that the users are automatically put into VPN group 1 then if I need to I can just change it to VPN group 2.  The reason for this is almost all users are VPN group 1 and unless they are added to a VPN group they can not connect to the VPN.

Or is there another setting that I need/am able to configure to allow users not in a VPN group to connect?

[emnoc]

If you want  groups  associate them to ldap group and use that in your vpn cfg

config user group      edit "SSO_Guest_Users"    next    edit "GROUPO01"        set member "LDAPSRV01"            config match                edit 1                    set server-name "LDAPSRV01"                    set group-name "CN=Vpnuser1,CN=Users,DC=1plus1eq2,DC=com"                next            end     next     edit "GROUPO02"        set member "LDAPSRV01"            config match                edit 1                    set server-name "LDAPSRV01"                    set group-name "CN=Vpnuser2,CN=Users,DC=1plus1eq2,DC=com"                next            end    next  And so on, you  call each  group  up and  define what he/she needs and just move the user into that group. You can probably nest  groups, but I have no experience in  that area. Ken 

[arae]

Thank you but I am not looking for ldap groups these are VPN groups we are not currently running LDAP but will be in the near future.