ACS 4.2 Raduis Authen for SSL VPN Users

[Imran Ahmad]

Using Cisco ASA I want the  ssl clientless vpn users to be authenticated through a local Radius-Server. but it does not work, and on asa while i want to see (Debug Radius) output, there is no debuging msgs displayed.   

When i try to test the user which i have created on the ACS-Server 4.2,  the test gets successfull.  any idea where i have made a mistake in my configuration ?

[Gurpreet Puri]

Hi Imran,

Could you please share the configuration.

Regards,
Gurpreet S Puri

****************************
Keep Smiling, Peace :)
****************************

(Please Rate Helpful Post)

[Imran Ahmad]

It's my asa config>

aaa-server aaa protocol radius
aaa-server aaa (inside) host 192.168.2.16
authentication-server-group aaa

group-policy CL_SSL_POLICY internal

group-policy CL_SSL_POLICY attributes

vpn-tunnel-protocol ssl-clientless

webvpn

  url-list value CL_SSL_LIST group-policy CL_SSL_POLICY internal
group-policy CL_SSL_POLICY attributes
vpn-tunnel-protocol ssl-clientless
webvpn
  url-list value CL_SSL_LIST

tunnel-group CL_SSL_PROFILE type remote-access
tunnel-group CL_SSL_PROFILE general-attributes
authentication-server-group aaa

default-group-policy CL_SSL_POLICY