to overcome the issue of vpn concentrators not being able to work with cisco secure acs internal database and password expiry i am now trying to have the concentrator request the acs to use active directory. i have tried many different configurations but do not seem to be able to get this to work. has anyone got it to work yet?
this is how i have configured the box:
1. vpn concentrator uses internal database which uses radius with expiry
2. this group is linked to a radius/acs authentication server
3. my username and password is configured to use windows database and i have linked this is the external database section.
my error is unknown domain.
just wondered if anyone had any ideas?