UserID Active Directory multiple VSYS

[Jedi_D]

Hello people, 

I have a novice question so apologies if it is too obvious to some. 

I have created 5 vsys and I want to use the same Active Directory server in all 5 vsys (vsys A, B, C, D,E) for userid in policies. 

The Active Directory is only routable via one of the vsys (vsys A). Does this mean that I should create an interface in the other 4 vsys so I can reach the AD server from each vsys? so vsys B would have an interface to a router which can reach the AD server. so vsys C,D and E would have an interface each to a router which can reach the AD server. 

Or is there a way to share the AD between vsys? I'm a novice to AD so any help appreciated. 

[reaper]

you can configure the global service route which redirects all vsys to the same service route

you can change that behavior (which you don't want in this case) by accessing the vsys specific service routes and setting specific routes for each individual vsys

[Jedi_D]

Thanks Reaper, I think I'm going to create a management vsys to connect to the AD server. Then create an auth profile for AD using the management vsys. I believe this Auth profile can then be used by all my individual vsys. So should be ok. 

[reaper · Accepted solution]

if you set the profile to location 'shared' it can be used by all vsys