VPN user authentication with ACS through AD

[riteshmalpani]

Hi,

I have configured SSL , Any connect and IPSEC VPN on my ASA 5520. I want to authenticate the user through ACS and AD. I also need to define different access policies for different tunnel users through Group assignment in ACS.

Please help me in giving the configuration guide and technotes for the same.

Thanks

Ritesh

[Shilpa Gupta]

Hi Ritesh,

As I understand from the problem description that you need to authenticate VPN users with ACS having external database on AD.

Here are some documents for your reference:-

Configuring a Windows External User Database

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/UsrDb.html#wp353791

Creating an ACS Group Mapping for Windows

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/GrpMap.html#wpxref42113

Configuration example for adding AAA client on ACS:-

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c18ff.shtml

I hope it helps.