Solved: ACS 4.1, PIX 515, Active Directory

pstebner1 · ‎04-11-2007

I have a Windows environment with a PIX 515E firewall. We have site-to-site VPNs as well as VPN clients.

I have just installed ACS 4.1 and would like to configure it to do vpn client authentication againt Active Directory.

Can someone please post a link to a doc which describes this? I have been looking all day!

Thanks in advance,

Paul

Collin Clark · ‎04-12-2007

If you remove the

vpngroup authentication-server

from the PIX it should then use local username/passwd.

View solution in original post

Collin Clark · ‎04-12-2007

http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008080f2d1.shtml

HTH and please rate.

pstebner1 · ‎04-12-2007

Thanks for the response. I actually figured this out since I posted the question yesterday. However, now I have a new question. I already have a client VPN set up on the PIX (6.3, btw) and I don't want to affect the current setup. I found how to exclude xauth from site-to-site VPNs, but is there any way that you can exclude current vpngroups from xauth?

thanks,

Paul

Collin Clark · ‎04-12-2007

If you remove the

vpngroup authentication-server

from the PIX it should then use local username/passwd.

pstebner1 · ‎04-12-2007

Very good!

Thanks,

Paul