topic Re: ASA Radius Authentication in Network Security

ASA Radius Authentication

BRIAN O'LOUGHLIN — Mon, 11 Mar 2019 20:34:55 GMT

Hi. I have a 5510 authenticating successfully with a RADIUS server. I'm using it for VPN authentication and it works great. I would also like to do this for adminstrator access to the ASA. When I turn it on though, anyone that can authenticate for VPN access is also granted administrative access to the ASA. Obviously, I need to limit that to a select few users. Any ideas on overcoming this issue are appreciated.

Re: ASA Radius Authentication

Nicolas Fournier — Thu, 19 May 2011 14:26:38 GMT

Hi Brian,

This is achievable.

You should configure the following on your ASA: http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/a1.html#wp1544708

Then setup your Radius user with the service type attribute with either Admin or Remote access rights:

Service-type=Admin

Service-type=Remote-access



Regards,
Nicolas