Authentication using Microsoft 2008 Active directory for Cisco RADIUS login

Mailman List Mirror (Read Only)
1

Hello all,

                I am having some trouble getting my Cisco routers to use
Active directory to authenticate users. I have searched on Google and so
far I am coming up dry on good documentation that will work.

I have used these links.
http://briandesmond.com/blog/how-to-authenticate-against-active-director
y-from-cisco-ios/

http://filedb.experts-exchange.com/incoming/2008/12_w51/87700/TA0001-Win
dows-2008-RADIUS-for-C.pdf

When I am doing a debug against the AAA I am getting the "Response (32)
failed decrypt" error. Any thoughts? Thank you in advance.

M.A.R

2

Can you post your config on the router?

Also, this may be better to post over at cisco-nsp.

B

3

I know $myemployer Uses Cisco ACS to hit AD for logins. Maybe use tac+ to then query AD.

4

I've set it up on 2003 before, found this article...
http://social.technet.microsoft.com/Forums/en-US/winserverNIS/thread/bfbbbae4-a280-4b3f-b214-02867b7d33e3/

<http://social.technet.microsoft.com/Forums/en-US/winserverNIS/thread/bfbbbae4-a280-4b3f-b214-02867b7d33e3/>it
may be of use.

Essentially on 2k3 it was a case of IAS and setting up the Cisco to use
auth-port 1645

Looking at this you use NPS and change the port