Using AD to Assign WebVPN Users to Groups

[sebutler4]

Hi

I am configuring a concentrator 3005, authentication is via AD which works fine but I don't seem to be able to assign to uses to groups. The docos only give step by step instructions on using Radius. Has anyone done this ?

[mchin345]

Using a RADIUS server to authenticate users, assign users to groups by following these steps:

Step 1 Authenticate the user with RADIUS and use the Class attribute to assign that user to a particular group.

Step 2 Set the class attribute to the group name in the format OU=group_name

For example, to set a WebVPN user to the SSL_VPN group, set the Radius Class Attribute to a value of OU=SSL_VPN; (Don't omit the semicolon.)

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_guide_chapter09186a00801f1dd5.html#1013532

[sebutler4]

Sorry my post was probably a bit confusing. Yes the Radius setup is in the notes and I have already got that working. However I wish to use Active directory to do the authentication and authorization. It is the AD authorization and group assignmnet part that I am having difficulty with.