VPN 3.5 Client Authentication with Active Directory

[DOUG DAVIDSON]

Can a 3.5 software client be authenticated on a 3060, and the users be authenticated by Microsoft AD? I know it gives you the option of NT Domain, Radius, SDI, or internal. I tried setting a group to external and setup an authentication server of one of the domain controllers, but I am unable to authenticate.

Thanks,

Doug

[vijkrish]

Currently native authentication from 3000 to AD is not possible. Current choice is you need to have Cisco Secure ACS windows/any radius server that supports external db authentication to AD.

[ishah]

Hi,

Use the Microsoft Internet Authentication Server to authenticate users with Active Directory. Just install it on a server in the active directory.

The only gotcha is that the IAS to Concentrator will be clear text so it needs to reside on a secure DMZ.

Documentation from Microsoft is not that clear

We have this running fine with some limitations.