Triple A authentication using LDAP

[Lake]

Hi Guys,

We have a Cisco ASA5516 firewall running version 9.7. We are currently using RADIUS authentication for anyconnect VPN. We will be upgrading our Domain Controllers to 2012 R2 and we plan to use LDAP authentication for Anyconnect VPN instead of RADIUS.

Can someone please confirm if the commands below should be removed from our ASA:

aaa-server RADIUS-NEW protocol radius
aaa-server RADIUS-NEW (inside) host 192.x.x.x

Also, Please let me know what commands I need to add to configure LDAP authentication?

Any help will be greatly appreciated.

Thanks,

Lake

[GioGonza · Accepted solution]

Hello @Lake, 

Yes, in order to remove the commands for RADIUS those 2 are the one to clear that configuration, also if you want to configure LDAP you can follow this link: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98625-asa-ldap-authentication.html

HTH

Gio

[Lake]

Thank you.