ASA 5500 Series capabilities with LDAP

globalitteam · ‎05-14-2009

Hello forum,

I would like to know if the ASA5500 is capable of doing, without an external radius server, the AAA process against a generic ldap directory?

And if it can, can it compare encrypted passwords? ( I allready have a wireless controller that couldn't do that because it needed the passwords stored in clear in the directory)

Thanks for your replies,

Best Regards,

Matthew

Report Inappropriate Content · ‎05-20-2009

You can configure the security appliance to authenticate and authorize IPSec VPN users, SSL VPN clients, and WebVPN users to an LDAP directory server. The below URL describes using an LDAP directory with the security appliance for VPN user authentication and authorization.

http://www.cisco.com/en/US/docs/security/asa/asa71/configuration/guide/aaa.html#wp1072211