VPN Users should use Domain username rather than username on ACS

[MANSOORQ123]

Dear Team Members

i have a very basic requirement,

I have ACS ( running on VMWare) 5.1 . it is integrated with 2 AD Servers ( one in 2K3 domains and another in 2K8) domains, at present ACS is functional for

1: Wired NAC

2: Wireless NAC

3: Radius / Tacacs device Administration.

4: VPN Users ( Just Extended Authentication, no authroization through Dynamic ACL)

All above features are working fine, Client wants that VPN users should use their Active directory username/password, rather than username/password

configured on the ACS. in that case there will be no need to define username on ACS.

I executed the following.

1: go to Policy - Remote Access VPN

2: Select Identity - and Selects Identity Store Sequence as "AD1"

i then try with the following combination, when XAUTH happens for the remote VPN clients.

Domain/username

//Domain/username

\\Domain\Username

but none of them works from me. and authentication does not happen.

Any Idea in this regard will be highly appreciated.

Thanks

Mansoor

[Tarik Admani]

Mansoor,

In the monitoring and reporting page what does the report show for the users that are using the vpn? Are they failing to match a user in the AD container? Also what version of ACS are you using? Are you running any patches?

Thanks,

Tarik