I am setting up certificate based authentication on a Cisco ASA 5520 for remote access vpn. I am using Microsoft RADIUS on the inside interface to do the auth. The difficulty I am having is selecting the proper tunnel group for each user. I would like to be able to select the tunnel group based on an AD group. I am looking into setting up certificate group matching rules but am not sure if there is a better way. With certificate group matching rules I think I would have to setup a rule for each individual user name. I want to avoid this if possible. Is there a radius attribute or something that will select the tunnel group on the ASA based on the RADIUS policies and AD group? Thank you.
In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.
From Cisco ASA version 8.3, the Network Address Translation (NAT) configuration has been completely redesigned and it may be helpful to have the syntax configuration for both at a
You may as well want to read official Cisco published AS…
Both in life and business – not all partnerships are created equal.
As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:
• Key questions to ask when considering a partnership to accelerate your business into the cloud
• Pitfalls and mistakes other partners…