Remote Acess VPN vFTD 6.2.3

[Artyom krassilnikov]

Hi. 

I have virtual FTD 6.2.3 and I can't to deploy RA VPN - "Login error". In trubelshoting section of VPN in Firepower MC i have this message:

AAA Marking LDAP server 172.20.10.100 in aaa-server group 172.20.10.100 as ACTIVE

AAA Marking LDAP server 172.20.10.100 in aaa-server group 172.20.10.100 as failed

Realm is configured. Test connection by AD IP and 389 port - "Test connection succeeded"

Test AD Join  - "Test AD join failed", but groups and users are available and i can dowload them.

Realms reconfiguration does not help, NTP is configured.

Was Do anybody have same issue?

[balaji.bandi]

You need to have Service account in AD to join this device(FTD) in to AD Domain group.

Once you join this FTD to AD, in AD you should also see this is registered there in the AD Server.

Also good to look at Windows side in EVENT Viewer what is wrong  ?

Below document explains more detailed :

https://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/200329-Configure-Active-Directory-Integration-w.html

BB

[Artyom krassilnikov]

Thank you fof help.  It was a problem with VM Windows AD server. in VM Windows server was up 2 interfaces and wrong route.