Multiple LDAP Servers

[bmurray]

I have 2 seperate LDAP/AD domains. I want one AnyConnect group to use one of the servers and another

group to use the other LDAP server. All users connect to the 2110 outside interface for AnyConnect  access.

How or can this be configured?

[balaji.bandi · Accepted solution]

I do not see any issue you can configure different profiles to use different LDAP source

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/214283-configure-anyconnect-ldap-mapping-on-fir.html

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/216955-configure-ad-ldap-authentication-and-u.html

[bmurray]

This shows different groups but the same Ldap server. I have 2 different domains and AD instances. So two entirely 

different LDAP configurations.

[thomas · Accepted solution]

https://cs.co/ise-guides > Cisco Adaptive Security Appliance (ASA) > Cisco Adaptive Security Appliance (ASA) Software Configuration Examples and TechNotes :

• Configure AD (LDAP) Authentication and User Identity on FTD Managed by FDM for AnyConnect Clients 26/Mar/2021
• Configure AnyConnect LDAP mapping on Firepower Threat Defense (FTD) 03/Dec/2019
• Configure the ISE for Integration with an LDAP Server