VPN Authentication against Windows Active Directory

[jgarcia22]

I'm trying to implement a vpn rollout (vpn software client to pix) and want to have the users authenticating against the windows 2000 active directory. Does anyone know how I would go about doing this? Any configuration examples would be greatly appreciated or a white paper link.

[mike.nguyen]

It will work if your pix box supports RADIUS authentication. Windows 2000 Server includes a RADIUS server component called Internet Authentication Service (IAS), which you can add through the Add/Remove programs ctrl panel. The server on which you are installing IAS has to be part of a win2k AD domain. Once IAS is installed, open the IAS management console and register the IAS service with AD by right clicking on the local IAS server. From then on you'll just have to configure your pix box to use this RADIUS server for authentication. Hope that helped.