Carl, you didn't mention what type of VPN device you are using. If you use a 3000 series Concentrator then you don't need RADIUS. It will "talk" directly to a Windows domain for authentication. If you are using a PIX or router then you need RADIUS to be an interface or interpreter if you will between these devices and your Windows domain. Routers and PIXs don't have the built-in SMB capability to speak directly to AD so they need RADIUS, TACACS+, etc.
IAS is pretty good and best of all it's free. If you do a search on CCO there is a document that takes you step-by-step to get this setup.
The thing that puzzles me is that you say you already put in a domain username and password and it gets you in. Is it possible that there is a local user database on your device that just happens to have the same set of credentials that are in AD?
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...