IPSec VPN using External (LDAP) Authentication Server

Question

Does LDAP auth works for IPSec connections. I tried a remote account and local account. The local account works while the remote account errors with "Authentication Failed" and in System log it has "CHAP : Authentication Failed for User". The remote account is the same account I use to login to services on the XG. I know the was not supported previously in UTM9, but since there is an option to configure it now there is the impression that it should work. 
 Under Configure -> Authentication -> Services [VPN (IPsec/L2TP/PPTP) Authentication Methods] I have the remote authentication servers selected. These servers work for access to the User Portal and Administration page.

lferrara · Accepted Answer

Bracey, 
 if you have configured the LDAP successfully, your account should be able to authenticate using LDAP. Make sure to adjust the CHAP correctly from console. Use the command: 
 console> show vpn configuration 
 and the command: set vpn l2tp authentication xxxx to set the authentication. 
 Regards

Bracey Summers · Answer

Luk, 
 
 Thanks for the quick response. The part I was missing was the server that handled authentication between the firewall and LDAP. I now have it working (MS-CHAPv2 : Authentication Successful for User ...). 
 
 Bracey