02-23-2016 08:55 AM - edited 03-05-2019 03:24 AM
how do I setup VPN to use two different LDAPs and DNS/DHCP servers?
Both will need to be accessible for use with the Windows native VPN, so I am not sure how to go about doing this. I added another server to the AAA Server Group, but that does not seem to be working for authentication. I need to have both Active Directories available for authentication as well as DHCP/DNS configurations both available to Windows native clients.
In short, I am bringing in a co-company network and adding it to our own. Out the door, their network will be not be joined to ours. There servers will be using a separate interface on the ASA with their own NAT/Access Lists. They are using a different IP range and subnet mask. They have their own Active Directory server, DHCP and DNS. I need to have it where they are able to access all of their servers without making any server changes, IP changes or name changes. Thanks,
02-23-2016 11:43 AM
There is not a lot of information here but based on what you have told us so far it seems like this would be a case where you might want to configure multiple contexts on your ASA, putting your resources into one context and the co-company resources into a different context.
HTH
Rick
02-23-2016 01:22 PM
I ended up using Shrew to get the problem solved. Thanks.
02-23-2016 12:23 PM
Don't use the native Windows VPN. It will end in heart ache.
Change over to using the Cisco AnyConect system. You will need the flexibility.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide