How do I configure L2TP over IPsec on a Cisco IOS Router with LDAP authentication?

Question

LDAP

I have a Cisco 39xx router with firmware 15.0(1r)M6. Of course, all crypto-features are activated.
L2TP+IPSec is configured on it with authorization via RADIUS.
You need to configure it for authorization via LDAP. LDAP itself is configured on the router, but authorization takes place for any user that is present in the LDAP directory, i.e. authorization by groups does not work. Or rather, it is not possible to configure authorization by group.
Tell me an example of a working config for IOS to implement a bunch of L2TP over IPSec with authorization in LDAP...

Answer 1

Raise the NPS server. And set it up as a Radius server.