Cisco ASA - SSL VPN LDAP Authentication

[khensani.baloyi]

I have a question though: Is it possible to configure a failover/backup LDAP server for the same profile for SSL VPN [AnyConnect], in case DC01/Active Directory goes down and the VPN users can still authenticate on the secondary DC02/Active Directory?

If possible, would you please share the data?

[Rob Ingram]

@khensani.baloyi you can define multiple LDAP servers in the LDAP group.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa919/configuration/general/asa-919-general-config/aaa-ldap.html

[khensani.baloyi]

Thanks for the feedback. 

I'll go through the document and try the solution thereof.