Problem With VPN SSO - NAC Inband VGW

[ecamposvr]

I have a problem with VPN SSO in NAC Inband VGW. All is configured but the CAA ask for username and password. It's necessary to use digital certificate in VPN?

ASA Configuration

Authentication/Authorization: ACS

Accounting: CAS

NAS Configuration

VPN Concentrator: ASA

Accounting Server: ACS

Mapping: ASA <> ACS

In addition to the CCA request User and  password, it is opening all the time after login.

[Faisal Sehbai]

Eduardo,

Not necessary to use certificates for VPN authentication. Please post your network diagram with VLAN, IP information.

Thanks,

Faisal

[ecamposvr]

Network diagram and ASA/Switch configuration attached.

[ecamposvr]

Network diagram attached.