cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
185
Views
0
Helpful
0
Replies
Highlighted

ASA with RADIUS via AZURE VPN

Hello,

I'm trying to configure ASA 5515-X as authenticator for VPN RA connections. ASA device + switches are on-prem. 

DC and RADIUS are on Windows Server 2016 installled as VM in Azure.

 

I have working 'Route based' site-to-site VPN tunnel with Azure (VTI interface). I can reach this VM on Azure (ping, rdp, etc..). 

 

My problem is that i can't set up AAA Server on ASA. In Radius configuration window, there is no option to choose VTI interface.

I found similar topic here: https://community.cisco.com/t5/vpn/radius-via-azure-vpn/m-p/3803634

,but in my scenario i don't have public IP assigned to Radius server. I'm trying to set Radius with 'Outside' interface and local IP of Radius on Azure. 

 

I have static route to network with WinServer VM.

I’ve added command: management-access outside , but this won't help - in ASDM, ASA says that management interface can't be with lowest security level. In config i have line with management-access outside, so ASA accept it.

Radius has configured 'ASA client' with my public (IP of 'Outside' interface).

 

I know from other topic, that this connection is possible but i'm running out of ideas.

Can anybody help me?

 

Kind Regards,

Damian

0 REPLIES 0
Content for Community-Ad