topic RADIUS based AAA for remote access tunnel groups (remote access in Network Security

RADIUS based AAA for remote access tunnel groups (remote access VPN users)

aimarchitect — Mon, 11 Mar 2019 21:54:36 GMT

Hi,

How would I go about configuring RADIUS based AAA for remote access VPN users? I have an OSX RADIUS server and an ASA 5510

I think I need to configure something like:

aaa-server RADIUS-GROUP protocol radius

aaa-server RADIUS-GROUP (inside) A.B.C.D

key KEYNAME

(I want to keep console and SSH using LOCAL, so I keep this: "aaa authentication ssh console LOCAL", right?)

What does the rest of the config look like to get RADIUS based AAA for remote access VPN users?

Thanks

RADIUS based AAA for remote access tunnel groups (remote access

Julio Carvajal — Wed, 23 Nov 2011 23:34:17 GMT

Hello Greg,

Ssh question? Yes, with the LOCAL you are going to keep it with the database.

Remote access VPN Users ( Web clients) question?

aaa authentication secure-http-client
aaa authentication include https outside 60.60.60.60 255.255.255.255 Radius_server


Please rate helpful posts,

Julio

RADIUS based AAA for remote access tunnel groups (remote access

aimarchitect — Mon, 28 Nov 2011 19:15:02 GMT

Actually, I was looking for the configuration for standalone VPN client remote access users, not web client users. Thanks.

RADIUS based AAA for remote access tunnel groups (remote access

mvsheik123 — Mon, 28 Nov 2011 20:33:45 GMT

Hi Greg,

Along with the above commands, you need to configure server-group in the 'tunnel-group type general-attributes.

'tunnel-group type general-attributes

authentication-server-group RADIUS-SERVER

hth

RADIUS based AAA for remote access tunnel groups (remote access

aimarchitect — Mon, 28 Nov 2011 20:44:17 GMT

Thanks MS! is there a way to configure back-up AAA using the locally configured info if the RADIUS server goes off line?

Would it look something like?

'tunnel-group type general-attributes

authentication-server-group RADIUS-SERVER LOCAL