remote access vpn with ldap

[opnineopnine]

Hi all,

Im configuring  a remote access vpn with ldap, for what I see in some examples I have to create a user/pass. 

In my case I already configured the aaa-server to the ldap. I also have the tunnl-group with the authentication-server.

Must I create a user/pass ?

Thanks. 

[Julio Carvajal]

Hello,

Not sure if I am following exactly in your question...

Let's say we are talking about an ASA with LDAP integration for RA VPN authentication.

In that case you need to have a user and password account for the ASA to be able to bind itself to the LDAP Server.

This account that you are going to create for the ASA should be able to do a object query into the LDAP database plus be able to create objects.

Does it makes sense?

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2-CCNP, JNCIS-SEC
For inmediate assistance hire us at http://i-networks.us

[opnineopnine]

Hello Julio,

Im working on this doc.

https://supportforums.cisco.com/document/139241/remote-access-vpn-asa-authentication-using-ldap-server

And as you can see its adding a user/password, that is not the same with the ldap, my questions is do I have to add this user or not?

thanks. 

[Julio Carvajal · Accepted solution]

Hello,

I see what you mean!

That is not required for the LDAP integration.

You are going to do the authentication with LDAP not the LOCAL database so no need for that.

Remember to rate all of my answers

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2-CCNP, JNCIS-SEC
For inmediate assistance hire us at http://i-networks.us