MX & AnyConnect Client - Limit VLAN Access

[Erik_R]

Hello.

Is there any way to limit a user's access to specific VLANs when they connect using the AnyConnect VPN client?

In other words, I'd prefer they only have access to a few specific VLANs.

Thanks!

[GreenMan · Accepted solution]

Look at implementing Meraki Group Policies:    https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance#Group_Policies

[Erik_R]

This is exactly what I am looking for.

If I am understanding this correctly, the Group Policy (the group created) on the Meraki side does not correlate to a group in AD, correct?

This just applies to a specific Network Policy on the RADIUS server.

I would have to create another Network Policy on the RADIUS server in order to assign different network access "rights" via another Group Policy on the MX.

In other words, lets say a user group and an admin group where the admin group should have full network access.

[PhilipDAth]

>I would have to create another Network Policy on the RADIUS server in order to assign different network access "rights" via another Group Policy on the MX.

That is correct.