ASA 5520 8.0 asdm 6.3 VPN Radius (ias) info wanted

[jasondvox]

Hey all,

I need some documents and config examples for using radius (IAS) for vpn on a asa 5520.

I need to off load as much configuration as possible to ad user attributes. IE login time, groups, static ip address....

Reason is I need to keep the twits out of the Firewall I figure if I can put as much as I can in a windows AD user account there will be less issues on the ASA.

Again config examples, docs, radius attribute mappings etc all welcomed.

Thanks

 

[brianinms]

If you are going to set a bunch of individual policies then I would recommend you purchase ACS. If you merely want to authenticate users then IAS will be fine.