Allowing LDAP group to authenticate on Cisco ASA for management

[Pushkar Joshi]

Hello,

We are trying to implement LDAP authentication for our Cisco ASA 5520 for management access. Currently we have configured local user accounts for the ASA admins. But we want to authenticate them with their AD account.

We have a LDAP group created for ASA admins and we just want to assign permissions to that group to authenticate to ASA.

I'm not referring to VPN logins. I just want ASA admins to login to ASA with their AD credentials.

Can anyone help here?

[Marvin Rhoads]

You cannot do that directly from the ASA to your LDAP server.

You need to have an intermediary like a RADIUS server (i.e. Cisco ACS or ISE) to do that.

[Pushkar Joshi]

Thank you for responding Marvin.