Cisco IPsec VPN Active Directory Authentication

active-directoryciscovpn

I've been trying to get our Cisco ISR 2811 to authenticate the VPN clients towards an Active Directory server (so that the Cisco VPN client asks the user for username/password).

Googling around has only given me instructions on how to do it with a PIX/ASA, I would like to do the same on the router.

Thanks,
Mattias

Best Answer

This article might be a good starting point:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800946b7.shtml

Related Solutions

Cisco – Connect PIX to Active Directory for VPN

You need the Internet Authentication Service (IAS) installed on a domain member server and a shared secret that you enter on the IAS server and PIX.

then execute on your PIX:

aaa-server RADIUS protocol radius
aaa-server RADIUS (inside) host IAS_SERVER SharedSecretHere timeout 10
crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map client authentication RADIUS
crypto map outside_map interface outside
crypto dynamic-map outside_dyn_map 20 match address outside_cryptomap_dyn_20
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-MD5 
vpngroup Remote address-pool pix_inside
vpngroup Remote dns-server DNS_SERVER_1 DNS_SERVER_2
vpngroup Remote wins-server WINS_SERVER
vpngroup Remote default-domain domainToAuthenticate
vpngroup Remote idle-time 1800

That should point you in the right direction and get you started.

Cisco VPN client for WIndows 7 x64

Shrew Soft VPN client is a free IPSec client that runs on 32-bit and 64-bit Windows.

Current stable release (2.1.4) does not list Windows 7 as supported. Latest development version (2.1.5-rc2) should work. 2.1.5 also adds Cisco VPN profile (.pcf file) import, so if you have existing profile files you should try this version.

Best Answer

Related Solutions

Cisco – Connect PIX to Active Directory for VPN

Cisco VPN client for WIndows 7 x64

Related Topic