ASA debug Windows AD LADP SSLVPN

ASA debug Windows AD LADP SSLVPN

For debug purpose:

Debug ldap 255 Debug aaa common 255 test aaa-server authentication AD-Group host 10.10.1.2 username ABCUSER password NIHAOCHINA

Command examples:

ldap attribute-map AnyConnect_Ldap map-name memberOf IETF-Radius-Class dynamic-access-policy-record DfltAccessPolicy dynamic-access-policy-record AnyConnect_Users_dp description "This for NIHAO-China User Access" network-acl AnyConnect_VPN_User aaa-server NIHAO-AD-Group protocol ldap aaa-server NIHAO-AD-Group (inside) host 10.10.1.2 ldap-base-dn OU=Users,OU=NIHAO - China,DC=NIHAO,DC=local ldap-scope subtree ldap-naming-attribute sAMAccountName ldap-login-password ***** ldap-login-dn CN=Ni Hao,OU=Users,OU=NIHAO - China,DC=NIHAO,DC=local ldap-login-dn CN=Ni Hao,OU=Contractors,OU=Users,OU=NIHAO - China,DC=NIHAO,DC=local server-type microsoft aaa authentication telnet console LOCAL aaa authentication ssh console LOCAL webvpn port 8000 enable outside anyconnect-essentials svc image disk0:/anyconnect-win-3.1.04063-k9.pkg 1 svc enable tunnel-group-list enable group-policy AnyConnect_Group_Policy internal group-policy AnyConnect_Group_Policy attributes dns-server value 10.10.1.2 vpn-tunnel-protocol svc webvpn split-tunnel-policy tunnelspecified split-tunnel-network-list value AnyConnect_Split_Tunnel default-domain value NIHAO.Local webvpn svc keep-installer installed svc dpd-interval client 30 username NIHAOvpn password TUIANTUABGAIXUBQUB encrypted username NIHAOvpn attributes service-type remote-access tunnel-group AnyConnect_Tunnel_Group type remote-access tunnel-group AnyConnect_Tunnel_Group general-attributes address-pool AnyConnect_VPN_User authentication-server-group NIHAO-AD-Group default-group-policy AnyConnect_Group_Policy tunnel-group AnyConnect_Tunnel_Group webvpn-attributes group-alias AnyConnect_Users enable !

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。