12. Fortigate SSL VPN Authentication integrated with MS Active Directory using LDAP
*IAM
Administrator Access
VPN Users
User Firewall Policy
Install Active Directory Lightweight Driectory Servers in Your AD Server
Run Active Directory Lightweight Directory Services Setup Wizard
LDAP Port 50000
SSL Port 50001
Check MS-User.LDF
copy DC=dmz,DC=donghowa,DC=net
Edit LDAP Server
Name dmz.donghowa.net
Server 10.63.251.100
Server Port 50000 -} 389
Common Name Identifier sAMAccountName
Bind type Regular
Username : donghowa\donghowa
Password : ********
Test Connectivity
External Conntectors
Poll Active Directory Server
Server IP 10.63.251.100
User donghowa\donghowa
Password : *********
LDAP server : dmz.donghowa.net
Create SSL VPN group
Create 3 Account
vpn1 - SSL VPN group
vpn2 - SSL VPN group
vpn3 - No group