topic ACS ASA VPN Multiple Authentication Method in Network Access Control

ACS ASA VPN Multiple Authentication Method

fahadafzal — Tue, 26 Mar 2019 00:30:39 GMT

Hello there,

I am trying to configure certificate and password based authentication for all users, except for some users who will get authenticated by entering password only. Certificate + Password authentication is working like a charm and AAA Password only authentication is also working fine but they are not working simultaneously.

When I configure certificate + password authentication, then it password only athentication does not work and vise versa.

I want laptop remote access users get authenticated by certificate+password, and mobile users by password only. The reason behind doing it is that it is hard to import and install Internel CA certificate on mobile devices such as iphone, ipads, andriods..

Is it possible to enforce all users to present certificate. In case of failure, it asks username and password. Only mobile users will get access without certificate.

I am running ASA 8.2.5 and ACS 5.2

Please help.

Thanks..

ACS ASA VPN Multiple Authentication Method

harvisin — Tue, 02 Jul 2013 02:52:12 GMT

Hello,

May the following link help you out :-

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/eap_pap_phase.html

ACS ASA VPN Multiple Authentication Method

johnattard — Thu, 19 Sep 2013 00:45:00 GMT

i am currently working on a similar implementation but finding it hard finding the correct information. Unfortunity i dont have an answer for your question but I was wondering if you could help me out and highlight how you have done this.

Is the certificate and username/password getting authenticated by the ACS for the SSLVPN to succeed?

Thanks