Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to setup the remote access VPN to athenticate to a RADIUS server that is on the other end of a Site to site VPN on the same ASA?

I have an ASA 5505 that is at a branch office with a site to site VPN to head office (with a 5510) i then want to setup remote access VPN on the 5505 for home users of this site that will authenticate to a RADIUS server located on the head office LAN.

Is this possible? This will same me setting up another RADIUS server on the Read only domain controller that is currently on site.


share|improve this question
I don't see why not, as long as the 5505 can talk to the RADIUS server across the tunnel. – gravyface Feb 4 '11 at 21:29
how do i get the ASA to talk to the RADIUS server accross the tunnel? I can ping the radius server from the LAN on the 5505 but not from the 5505 itself. You have to select the interface of the radius server when setting up the AAA-server i've tried both inside and outside but none work. – Dan Feb 4 '11 at 21:35
What if you try: test aaa authentication radius host <your_radius_server_ip> from the 5505? – gravyface Feb 4 '11 at 21:51
I get "ERROR: Authentication Server not responding: no error" – Dan Feb 4 '11 at 23:14

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.