RE: IOS SSLVPN AND ACTIVE DIRECTORY

LOL,

Yeah quite easily;

Simply configure the standard radius groups you always configure and expose AD via radius in IAS in 2003 AD, or NPS in 2008

aaa authentication login msftad group radius

aaa authorization network msftad group radius

radius-server host 10.110.20.10 auth-port 1645 acct-port 1646 key 7 0991430B2A5411001

webvpn gateway somegw
webvpn context some-context
policy group some-policy
default-group-policy some-policy
aaa authentication list msftad
aaa authorization list msftad
gateway somegw

then on AD setup the IAS/NPS (here is some notes for windows 2008 server's Network Policy Server (NPS)

http://social.technet.microsoft.com/Forums/en/winserverNIS/thread/bfbbbae4-a280-4b3f-b214-02867b7d33e3

-Joe

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of Beauty
Sent: Friday, November 12, 2010 10:07 AM
To: ccielab_at_groupstudy.com
Subject: OT: IOS SSLVPN AND ACTIVE DIRECTORY

Hi All,
Is it possible to configure IOS sslvpn to authenticate users against
active directory , if yes can anyone provide suitable links.

-- 
Warm Regards ,
Beauty
Blogs and organic groups at http://www.ccie.net