VPN client-to-site

[Bismarck]

Hi!

I wonder if anyone managed to configure the IPsec VPN with AD authentication.

Note: No license Global protect.

At.,

[panos · Accepted solution]

Hi,

I configured many times.You have to use LDAP profile and an authentication choosing that profile.

What is your issue?

[apasupulati]

Hello,

Yes, you can use Radius/Kerberos/LDAP authentication methods for IPsec VPN connections.

Here's a document that can help you configure Ldap authentication for GP:

Thanks,

Aditi

[Bismarck]

Hi!!!,

thanks,

I wonder if the possibility existed configuration without license GP, because without the license'm getting just a pre-shared key for everyone and no other method of authentication.

[zarina]

GP license is only required if you need to configure multiple portals/gateways or use hip. You should be able to use AD for GP.

If you are referring to site to site VPN (Network -> IPSec) we authenticate the peer using pre shared key and local/peer identification.

[Bismarck]

I guess I'm not getting to spend my doubts.

My doubts and configure client-to-site authentication using AD, however I have no license GP that will influence or not. According to what you wrote in response to upward.

At.,