LDAP on ASA

[emmanuel.shoroma]

Hi, I need some assistance configuring the LDAP on ASA. I want to use the AD for VPN users authentication. I am using ASDM 5.2 for ASA administration. please assist.

[Jatin Katyal]

Here is the sample config FOR configuring LDAP on ASA for VPN user;

aaa-server LDAP-AD protocol ldap
aaa-server LDAP-AD host 
 server-port 389
 ldap-base-dn 
 ldap-scope subtree
 ldap-naming-attribute sAMAccountName
 ldap-login-dn 
 ldap-login-password 
 server-type microsoft

tunnel-group  type remote-access
tunnel-group  general-attributes
 authentication-server-group LDAP-AD


NOTE: Login user DN should have administratror privileges.

AD base DN for cisco.com would be DC=cisco,DC=com

CONFIGURING LDAP SERVER VIA ASDM
================================
http://www.cisco.com/en/US/docs/security/asa/asa71/asdm51/selected_procedures/asdmldap.html#wp1033083

Regards,
Jatin


Do rate helpful posts-