aaa issue

lyes.ouarti — Sun, 10 Mar 2019 20:50:01 GMT

hi,

i would like to configure acs to athenticate the ssh access to the pix firewall using active directory( windows 2003)

is it possible?

how to do it?

thanks.

Re: aaa issue

thiland — Wed, 06 Oct 2004 19:36:17 GMT

Yes it is possible.

First, you need to setup a RADIUS server on Win2003 (you can use the built in Internet Authentication Service (IAS)).

Once you have your RADIUS server configured, create a aaa authentication group for your radius server:

aaa-server AuthOutbound protocol radius

aaa-server AuthOutbound host 172.18.124.111 cisco

Then point your ssh authentication attempt to use RADIUS:

aaa authentication ssh console AuthOutbound

This document details setting up the IAS for VPNs. The concept is the same for shell access.

This one explains setting up AAA for SSH: