VPN authentication using LDAP

bsongstad · ‎07-28-2020

With more and more users requesting L2TP/IPsec VPNs, I find it impractical to keep track of which users are still active in our organization. I would like to let LDAP handle the VPN authentication for these users. Is that possible? I am able to connect to the LDAP server and authenticate as a firewall user, but I can't seem to figure out how get VPN connections to accept those ldap users.

Any guidance or experience is appreciated.

Thanks, Bill.

Markus · ‎07-28-2020

Hi Bill In short, yes this is possible I think this could be a good starting point. https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/589121/ipsec-vpn-with-forticlient and for AD auth https://docs.fortinet.com/document/fortigate/6.4.0/administration-guide/173316/add-ldap-user-authent...

Best

Markus

________________________________________________________
--- NSE 4 ---
________________________________________________________