Configure Network Settings > Manual Branch Office VPN Tunnels > Manual BOVPN Configuration Examples > Active Directory Authentication Through a BOVPN Tunnel

Active Directory Authentication Through a BOVPN Tunnel

If you have Fireboxes at two sites connected with a branch office VPN tunnel, and you have an Active Directory server at one of the sites, you can enable users at both sites to use the same Active Directory server for authentication. To use the same Active Directory server for authentication at two sites, you can add tunnel routes to the configuration of both devices as described below.

For example, consider an organization that has Fireboxes at two sites, Site A and Site B. The Active Directory server is located at Site A. The administrator wants the Firebox at Site B to use the Active Directory Server at Site A for authentication of local users.

Add a Tunnel Route to the Site A BOVPN Configuration

At Site A, you must add a tunnel route for traffic through the BOVPN tunnel from Site B to the local Active Directory server.

Add a Tunnel Route to the Site B BOVPN Configuration

At Site B, you must also add a tunnel route for traffic through the BOVPN tunnel between Site B and the Active Directory server at Site A.

Configure Active Directory Authentication on the Site B Device

Configure Active Directory authentication on the Site B device as described in Configure Active Directory Authentication.

After you complete these steps, the Site B device can use the Active Directory server at Site A to authenticate local users.

Give Us Feedback     Get Support     All Product Documentation     Technical Search