topic Re: How to do this in Network Access Control

How to do this

cisconoobie — Sun, 10 Mar 2019 22:01:16 GMT

I want VPn Users to autheticate vs my Microsoft Active Directory LDAP Server.

its not working when I try testing the authentication under ASDM.

I want to allow only people in a specific group or OU access to VPN.

Can someone walk me through the proper configuration?

Domain is xxx.local

OU=Security Groups (under domain)

Group under this OU is ITVPN

Users are in this group

Base DN: ou=Security Groups,dc=xxx,dc=local

Scope= All levels beneath the Base DN

nameing Attribute: uid

LDAP Attribute Map: ITVPN_GROUP

ITVPN_GROUP is Customer name: ITVPN and Attribute map Name: cVPN3000-IETF-Radius-Class

Gives me an erro that attribute not found.

Re: How to do this

tim.weid — Fri, 02 Mar 2007 23:21:41 GMT

What type of VPN?

Is this going to a concentrator, ASA, is it IPSEC VPN Client or SSL?

Re: How to do this

cisconoobie — Sat, 03 Mar 2007 01:19:41 GMT

ASA5520 IPSec VPN CLient

Re: How to do this

zaballa805 — Mon, 12 Mar 2007 14:24:53 GMT

i was configuring this same scenario and got the same message. - "Attribute not found"

check your AD attribute and see if you are using the correct attribute value.

What we did was to check on the AD with a LDAP browser.Our naming attribute is cn. we found out that the cn= but when we are connecting via IPSec VPN client, we were just using just the first name as our user id.

hope this helps.