VPN groups based on RADIUS/LDAP attribute?

[johnsmunoz]

Is it possible to assign users to different VPN groups depending on permissions defined in their RADIUS or LDAP login?  I'd really rather not have to give each user different group's and PSK's for their different vpn group rights.  These change frequently and it would be a pain to manage.  It would be easier if we could just base their vpn privileges based on their membership.  

[JP Miranda Z]

Hi johnsmunoz,

You can definitely configure Radius or LDAP mapping this guides should help you understand and configure this features:

LDAP mapping:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/91831-mappingsvctovpn.html

Radius mapping:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/117641-config-asa-00.html#anc6

Hope this info helps!!

Rate if helps you!! 

-JP-