ASA 5505 with LDAP Windows 2003 authentication

[rvr_76bg]

Hello guys,

I passed through the entire VPN area and I am a bit confused. I didn't find any information I needed.

OK.. What I am asking is:

What is the easiest way to setup Remote-access VPN server on ASA 5505 with user authentication in Active directory Windows 2003. Any help would be highly appriciated.

Regards.

Regards,

[rvr_76bg]

No one can help on this??

[husycisco]

Hi Rumen

ASA does not support LDAP binding to Windows Server for direct auth. The easiest and common practise is installing IAS in your Windows Server.

Here is the relevant document

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806de37e.shtml

Feel free to ask further question about your issue, if you encounter any problem.

Regards

[marcgq777]

I believe what you are attempting is possible with an os upgrade to 8.0(3) see this article.

http://www.cisco.com/en/US/partner/products/ps6120/products_configuration_example09186a00808d1a7c.shtml

[husycisco]

Marc,

I think the document you submit applies to Web/SSL VPN.

Regards

[rvr_76bg]

Hello Husycisco,

It worked, I have completed IAS AD to ASA binding. I am able to authenticate Users in AD from the ASA's test button.

I cannot figure out how to setup remote-access for Windows XP clients with IAS AD authentication. At least I dont have this option in GUI. Can some one provide me an idea how to complete this, or refer me to a cisco doc?? I couldnt find anything for WINXP VPN clients with ASA-IAS AD authentication.

Regards,

[husycisco]

Rumen,

You can use VPN Wizard.

http://www.cisco.com/en/US/docs/security/asa/asa71/getting_started/asa5500/quick/guide/rem_acc.html