topic Firepower configuration, VPN with Radius NSP in Network Security

Firepower configuration, VPN with Radius NSP

Vladyslav Ivanov — Thu, 21 Mar 2024 12:56:42 GMT

Hi everyone. How to configure Windows NSP on Firepower as a radius server for authorization and authentication of VPN users. I will be glad if someone shares his experience.

Re: Firepower configuration, VPN with Radius NSP

MHM Cisco World — Thu, 21 Mar 2024 13:42:38 GMT

https://www.cisco.com/c/en/us/support/docs/network-management/remote-access/212424-anyconnect-remote-access-vpn-configurati.html

Re: Firepower configuration, VPN with Radius NSP

Aref Alsouqi — Thu, 21 Mar 2024 14:13:54 GMT

NPS configuration on the FTD won't be any different compared to how you would configure ISE as the RADIUS server with the exception for the change of authorization (CoA) which I don't believe it will be supported with the NPS. Of course on the NPS you have to add the FTD as a client with the same PSK key that you will configure on the FTD, and the FTD must be able to communicate with the NPS server. Please take a look at this post of mine that shows you how to setup AnyConnect SSL VPN using ISE as the RADIUS server:

https://bluenetsec.com/fmc-anyconnect-ssl-vpn/