topic Re: UserID Active Directory multiple VSYS in General Topics

UserID Active Directory multiple VSYS

Jedi_D — Thu, 21 Jan 2021 12:02:15 GMT

Hello people,

I have a novice question so apologies if it is too obvious to some.

I have created 5 vsys and I want to use the same Active Directory server in all 5 vsys (vsys A, B, C, D,E) for userid in policies.

The Active Directory is only routable via one of the vsys (vsys A). Does this mean that I should create an interface in the other 4 vsys so I can reach the AD server from each vsys? so vsys B would have an interface to a router which can reach the AD server. so vsys C,D and E would have an interface each to a router which can reach the AD server.

Or is there a way to share the AD between vsys? I'm a novice to AD so any help appreciated.

Re: UserID Active Directory multiple VSYS

reaper — Mon, 01 Feb 2021 15:14:10 GMT

you can configure the global service route which redirects all vsys to the same service route

you can change that behavior (which you don't want in this case) by accessing the vsys specific service routes and setting specific routes for each individual vsys

Re: UserID Active Directory multiple VSYS

Jedi_D — Mon, 01 Feb 2021 15:18:58 GMT

Thanks Reaper, I think I'm going to create a management vsys to connect to the AD server. Then create an auth profile for AD using the management vsys. I believe this Auth profile can then be used by all my individual vsys. So should be ok.

Re: UserID Active Directory multiple VSYS

reaper — Mon, 01 Feb 2021 15:27:24 GMT

if you set the profile to location 'shared' it can be used by all vsys