ASA Radius Authentication

[BRIAN O'LOUGHLIN]

Hi. I have a 5510 authenticating successfully with a RADIUS server.  I'm using it for VPN authentication and it works great.  I would also like to do this for adminstrator access to the ASA.  When I turn it on though, anyone that can authenticate for VPN access is also granted administrative access to the ASA.  Obviously, I need to limit that to a select few users.  Any ideas on overcoming this issue are appreciated.

[Nicolas Fournier]

Hi Brian,

This is achievable.

You should configure the following on your ASA: http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/a1.html#wp1544708

Then setup your Radius user with the service type attribute with either Admin or Remote access rights:

Service-type=Admin

Service-type=Remote-access



Regards,
Nicolas