Configuration guide for AAA (on ASA) and benefits of Cisco Context Directory Agent (CDA)

[Kevin_W]

Hello,

I would like to configure and test AAA on a Cisco ASA (e.g. 5505 or 5510). 
1. Are there any further tools or server needed to use this feature? And do you have good configuration guides?

I have already tested a Cisco CDA. It was able to show the active directory users and their equivalent IP address.
2. Do you have a short explaination what kind of possibilities I have with this server/tool? Is it maybe usable for the mentioned AAA on the ASA?


Thanks in advance

Best regards

[Florin Barhala · Accepted solution]

1. Yes you need a Radius server like Windows NPS or TACACS server like Cisco ACS/ISE.

2. CDA it's just a man in the middle, you will still need an AAA server: radius or tacacs (see no1).