[c-nsp] WebVPN via RADIUS - how to identify by group?

[Ben Steele]

Howdy all,

 

Anyone know if it's possible to get as ASA to spit out the group name in an
av-pair via radius when authenticating a user? (in this case webvpn).

 

The issue i'm having is multiple clients on the one ASA authenticating via
IAS/AD and the possibility of overlapping usernames between clients(groups),
I need another identifier from the ASA to auth them against other than
user/pass, ie group would be perfect.

 

Any ideas?

 

Cheers

 

Ben