cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1745
Views
5
Helpful
2
Replies

PIX VPN Authentication

gparrish
Level 1
Level 1

I see options to authenticate VPN users over Radius, Tacacs+, Local or using a VPN Group. Is there anyway to authenticate against a NT Domain, Microsoft Active Directory or Novell eDirectory directory service?

Cant find any details in the config guide.

Thanks,

Greg

1 Accepted Solution

Accepted Solutions

mhoda
Level 5
Level 5

Hello Greg,

Thanks for your question. Actually, PIX doesn't have built in API unlike VPN 3K to send authentication request directly to the devices you have mentioned. PIX has the radius/tacacs+ API and thats why its required to use a AAA server that support Radius/Tacacs. Cisco Secure AAA server can be integrated with all the deviecs you have mentioned. You can point your PIX to the Cisco Secure AAA server and it will forward to the request to the database you have mentioned in your post.

I hope this helps. Regards,

Mynul

View solution in original post

2 Replies 2

mhoda
Level 5
Level 5

Hello Greg,

Thanks for your question. Actually, PIX doesn't have built in API unlike VPN 3K to send authentication request directly to the devices you have mentioned. PIX has the radius/tacacs+ API and thats why its required to use a AAA server that support Radius/Tacacs. Cisco Secure AAA server can be integrated with all the deviecs you have mentioned. You can point your PIX to the Cisco Secure AAA server and it will forward to the request to the database you have mentioned in your post.

I hope this helps. Regards,

Mynul

maha
Level 1
Level 1

Windows 2000 Advanced server has builtin Radius Server (Internet Authentication Server). You can configure this radius server to use the domain database for authentication.

Regards

maha

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: