Create service user and group on the Open Directory server.Ģ. This allows us to use Mac OS X’s built-in Cisco IPSec profile when setting up VPN instead of having to use a 3rd-party VPN app, and some of the instructions below are extracted from it.īinding a WatchGuard to Apple’s Open Directory is pretty straight forward in itself, however WatchGuard’s LDAP binding relies on the property memberOf to determine membership of an user account (which doesn’t exist in Apple Open Directory), we’ll need to perform a workaround to circumvent this.ġ. WatchGuard has an excellent article here with detailed instructions on configuring a WatchGuard to mimic the behavior of Cisco IPSec.
In this article I’ll show you how to configure a Watchguard firewall for Mac OS X and iOS, and how to bind a WatchGuard firewall to Apple Open Directory for VPN authentication.
