[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2851
  • Last Modified:

Configure LDAP

I am wanting to use LDAP to authenticate users associated with a security group in AD. I'd prefer the remote users use the Cisco client app on their computers and then be required to authenticate upon attempting to login to the VPN. Any one have any thorough instructions?
0
BrettAMair
Asked:
BrettAMair
  • 3
1 Solution
 
fileinsterCommented:
Instead of using LDAP you could use RADIUS. You can install the RADIUS service on a server in your domain and configure the PIX to look at it for authentication. All you have to do in the PIX is set up an AAA group, configure a Radius server IP, and shared secret and then on your VPN group set it to use that specific AAA group.

Is that what you mean?
0
 
BrettAMairAuthor Commented:
No, unfortunately it's not. We're going to use the LDAP connector service instead of Radius. Also, it's not a PIX, I only selected that because a PIX is the closest option E-E.com has for the Cisco ASA.

So again, I'm needed to configure my Cisco ASA 5520 to use LDAP for VPN authentication. Any takers?
0
 
fileinsterCommented:
Is it something like this:

aaa-server AD-LDAP protocol ldap
aaa-server AD-LDAP host <IP of DC>
  ldap-base-dn DC=yournet,DC=local
  ldap-scope subtree
  ldap-naming-attribute samAccountName
  ldap-login-password <yourpass>
  ldap-login-dn CN=Administrator,CN=users,DC=yournet,DC=local

tunnel-group <groupname> general-attributes
  authentication-server-group AD-LDAP


Does that meet your requirements? However RADIUS is a far better option. Why do you want to use LDAP?
0
 
fileinsterCommented:
Hi,
Did my solution not answer the question? What was missing?
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now