Remote VPN Authentication in PIX/ASA

haithamnofal · ‎07-08-2007

Hi,

I have 2 questions related to Remote VPN authentication:

1- I wold like to check whether I can integrate remote IPSec VPN authentication with an external AAA server or not, because I couldnt find such option when creating users in the firewall. If yes, can I integrate directly with LDAP server?

2- Is there any limitations in terms of the number of local VPN users which I can create on the PIX/ASA?

R/Haitham

JBDanford2002 · ‎07-08-2007

Here is a link for configuring LDAP AAA

http://www.cisco.com/en/US/docs/security/asa/asa71/asdm51/selected_procedures/asdmldap.html

As far as maximum users, I dont know of any limitation. I would say anymore than 10 to 20 would become a management hassle when you have to change passwords, if you have more than one VPN termination point etc...

haithamnofal · ‎07-08-2007

Thanks for the excellent link.

Back to the users, I have an issue when creating many users (approximately over 18) some old users get deleted when adding new users; do you have any clue on what possibly could be the cause of this?

Regards,

Haitham