Active Directory Integration for WebVPN 1

[jag62470]

Hi All,

I'm new to the Cisco world. We purchased an ASA 5505 with the intention of setting up the WebVPN for remote users. How can I set it up to integrate with our Active Directory for user authentication.

Thanks,
Jacob

 

[garnetbobcat]

This page at Cisco has a bunch of links related to WebVPN:

http://www.cisco.com/en/US/products/ps6120/prod_configuration_examples_list.html#anchor12

Specifically, you will probably be interested in:
"ASA 8.0: Configure LDAP Authentication for WebVPN Users"

Cisco.com seems to be having problems right now, but that doc appears in that section.

Matt
CCSP

http://www.wr-mem.com

 

[jag62470]

Thanks Matt. I will check it out.

 

[jag62470]

I still am having trouble with this. Has anyone gotten it to work?


Thanks,

Jacob Gomez
Technical Services
Faith Assembly of God

http://www.faithassembly.org

 

[jag62470]

I tried the steps in the Cisco article and I get the following message when I try to test the connection:

ERROR: Authorization Server not responding: AAA server has been removed.

Has anyone seen this before? What can I do to get this fixed?


Thanks,

Jacob Gomez
Technical Services
Faith Assembly of God

http://www.faithassembly.org

 

[garnetbobcat]

That means that the ASA is unable to contact the LDAP server. Make sure that you can ping from the ASA to the LDAP server and that the LDAP server is configured to respond to the ASA.

Beyond that, check your configuration and check the path through the network to make sure there is connectivity.

Matt
CCIE Security

http://www.wr-mem.com

 

[jag62470]

Hi Matt,

I was able to ping the LDAP server from ASDM. How can I make sure that the LDAP server is configured to respond to the ASA? I'm using Microsoft Windows 2003 Active Directory.

Thanks.


Thanks,

Jacob Gomez
Technical Services
Faith Assembly of God

http://www.faithassembly.org

 

[jag62470]

I finally broke down and called Cisco today.

They were able to help me figure out that the login dn was incorrect. Once we got that fixed it worked like a charm.

Thanks for all of your help and guidance.


Thanks,

Jacob Gomez
Technical Services
Faith Assembly of God

http://www.faithassembly.org

 

[garnetbobcat]

Good news. That would have been a tough one to figure out in the forum. Sorry we couldn't help, though!

Matt
CCIE Security

http://www.wr-mem.com