Describes Role-Based Access Control integration with VPNs, outlining concepts and practices for managing user access across virtual network segments.
RBAC by VPN is a network access control method that enables administrators to
-
define VPN groups with one or more network segments
-
assign users to specific VPN groups to manage and control their access, and
-
restrict user permissions so that access and monitoring are limited to devices and features within designated VPN groups in Cisco SD-WAN Manager.
Restricted access capabilities for users assigned to a VPN group
RBAC by VPN provides these restricted access to users configured with a VPN group:
-
Access to the VPN dashboard
-
Monitor devices, network, and application status via VPN dashboard
-
VPN dashboard information restricted to devices with segments in the VPN group
-
Monitor option restricted to devices with segments in the VPN group
-
Interface monitoring on each device restricted to interfaces of segments in the VPN group
VPN dashboard
Users configured with VPN group can access only the VPN dashboard in read-only mode. Users with admin access can create the VPN groups and access both the Admin Dashboard and VPN Dashboard(s). An admin user can access these dashboards by choosing Dashboard from the Cisco SD-WAN Manager menu.