Beruflich Dokumente
Kultur Dokumente
Lessons in Tech
These steps assume you are using ASDM, but I have a ached the
CLI equivalents as well.
Prep
Do it
https://lessonsintech.wordpress.com/2018/04/20/asa-auth-ad/ 1/11
19/11/2018 ASA Local Authentication Using Active Directory | Lessons in Tech
Pick the Interface that the ASA will be able to reach your DC’s
through
Type in the IP address of your domain controller
Pick Microsoft as the Server Type
The Base DN is your domain suffix, enter that in the format
below
Depending on the hierarchy of your domain, the scope can be
one level or all levels beneath the base DN is required. If you’re
not sure, all levels beneath base DN will work, it will just be
slower in large domains.
https://lessonsintech.wordpress.com/2018/04/20/asa-auth-ad/ 2/11
19/11/2018 ASA Local Authentication Using Active Directory | Lessons in Tech
6. Expand LDAP A ribute Map and click Add. This is where the
magic happens.
https://lessonsintech.wordpress.com/2018/04/20/asa-auth-ad/ 3/11
19/11/2018 ASA Local Authentication Using Active Directory | Lessons in Tech
The entry should look like this at the end. Notice the =6 appended
to the end.
At this point you have an LDAP a ribute map. Only one can be
applied to a server group at a time. So if you have multiple groups
to check, enter them as additional lines in the A ribute Value
Mapping section.
9. For the LDAP A ribute Map, pick the Mapping you just created
(Group-Check)
https://lessonsintech.wordpress.com/2018/04/20/asa-auth-ad/ 5/11
19/11/2018 ASA Local Authentication Using Active Directory | Lessons in Tech
CLI Equivalent
ldap-base-dn DC=MyDomain,DC=Com
ldap-login-dn CN=BindAcct,OU=Users,DC=MyDoma
ldap-login-password **********
ldap-naming-attribute samaccountname
server-type microsoft
ldap-attribute-map Group-Check
exit
https://lessonsintech.wordpress.com/2018/04/20/asa-auth-ad/ 6/11
19/11/2018 ASA Local Authentication Using Active Directory | Lessons in Tech
2. Click Apply
CLI Equivalent
https://lessonsintech.wordpress.com/2018/04/20/asa-auth-ad/ 7/11
19/11/2018 ASA Local Authentication Using Active Directory | Lessons in Tech
https://lessonsintech.wordpress.com/2018/04/20/asa-auth-ad/ 8/11
19/11/2018 ASA Local Authentication Using Active Directory | Lessons in Tech
CLI Equivalent:
https://lessonsintech.wordpress.com/2018/04/20/asa-auth-ad/ 9/11
19/11/2018 ASA Local Authentication Using Active Directory | Lessons in Tech
https://lessonsintech.wordpress.com/2018/04/20/asa-auth-ad/ 10/11
19/11/2018 ASA Local Authentication Using Active Directory | Lessons in Tech
Advertisements
REPORT THIS AD
REPORT THIS AD
Cisco, Cisco ASA, Security, Windows
AAA , ACCESS , ACTIVE DIRECTORY ,
ASDM , AUTHENTICATION , CISCO , CISCO
ASA , CONSOLE ACCESS , FIREWALL ,
LDAP , MICROSOFT , MICROSOFT ACTIVE
DIRECTORY , SECURITY , SSH
BLOG AT WORDPRESS.COM.
REPORT THIS AD
https://lessonsintech.wordpress.com/2018/04/20/asa-auth-ad/ 11/11