VPN with RSA and LDAP Groups

Bruce_Arnott_NH — Mon, 07 Oct 2013 16:51:57 GMT

I'm tryin to rebuild our VPN environment with a pair of 5520. WE're going to use Anyconnect mobility exclusively with SSL. No IPSec and no SSL Webvpn.

We have a large number of contractors using the VPN to access specific internal resources so I would like to use different IP subnets for each contractor assigned through group policy. I don't want to have a different URL for each contractor so I want to assign the group policy through LDAP group memebership. However, primary authentication will be via RSA 2 factor.

How do I get the ASA to check group membership and hense assign the right group when primary authentication is through RSA?

Thanks for any help.

VPN with RSA and LDAP Groups

Jatin Katyal — Tue, 08 Oct 2013 08:52:38 GMT

yes you can do the Authentication to an RSA server and the Authorization to the LDAP server.

Please configure LDAP as an authorization server.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808d1a7c.shtml

Do let me know how it goes.

~BR
Jatin Katyal

**Do rate helpful posts**

topic VPN with RSA and LDAP Groups in VPN

VPN with RSA and LDAP Groups

VPN with RSA and LDAP Groups