UserID Active Directory multiple VSYS

cancel
Showing results for 
Search instead for 
Did you mean: 

UserID Active Directory multiple VSYS

L2 Linker

Hello people, 

I have a novice question so apologies if it is too obvious to some. 

I have created 5 vsys and I want to use the same Active Directory server in all 5 vsys (vsys A, B, C, D,E) for userid in policies. 

 

The Active Directory is only routable via one of the vsys (vsys A). Does this mean that I should create an interface in the other 4 vsys so I can reach the AD server from each vsys? so vsys B would have an interface to a router which can reach the AD server. so vsys C,D and E would have an interface each to a router which can reach the AD server. 

 

Or is there a way to share the AD between vsys? I'm a novice to AD so any help appreciated. 

1 ACCEPTED SOLUTION

Accepted Solutions

if you set the profile to location 'shared' it can be used by all vsys

Tom Piens
PANgurus

View solution in original post

3 REPLIES 3

L7 Applicator

you can configure the global service route which redirects all vsys to the same service route

 

you can change that behavior (which you don't want in this case) by accessing the vsys specific service routes and setting specific routes for each individual vsys

 

 

 

Tom Piens
PANgurus

Thanks Reaper, I think I'm going to create a management vsys to connect to the AD server. Then create an auth profile for AD using the management vsys. I believe this Auth profile can then be used by all my individual vsys. So should be ok. 

if you set the profile to location 'shared' it can be used by all vsys

Tom Piens
PANgurus

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!