Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hy!
I would like to use a third-party radius server for RAvpn authentication, i can authenticate the anyconnect clients without any problem.
I also would like to authorize them to be member of a particular sgt group so i send the Cisco-AVPair = "cts:...
based on the document below virtual ftd doesn't support sgt cllassification on ravpn. This might be the reason.
https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/trustsec/software-platform-capability-matrix.pdf
I'm still trying to set it up with freeipa and freeradius.
Everything works fine, fmc can read the groups from ipa, ftd can authenticate the ravpn users, but i also have a problem with point nr 2. : under radius server group in the 'Realms' drop down...
