Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

we're providing VPN Services to our Users through the Cisco ASA 5500 Series. As of now , the users can access VPN from any Client Machine. I want to allow VPN Access only to machines with particular MAC & IP Address. Is it possible to allow VPN Access for a selected clients through Verification of their MAC & IP.

share|improve this question
What are you looking to accomplish with this? The IP range might provide some level of assurance that only authorized networks are accessing the system, but a MAC address is easily spoofed and not communicated though any normal means in routed traffic. Can you clarify your goal? –  Shane Madden Oct 18 '12 at 4:58
The VPN Services are for internal users who access VPN from within our Wide Area Network. The VPN is provided for accessing the servers. we want to bind both the MAC & IP of the machine for VPN Access authorization. This will ensure that Users access VPN from Secure machines. P.S: we'll migrate the machines to Active Directory , and enforce Group Policies , so that users are not able to make any config changes & ensure better security. –  harryoxford Oct 18 '12 at 8:20
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.