[vpn-help] Problems using shrew to connect to ns5gt

[Christian Krackowizer]

Hi Thorsten,

we're using a lot of VPN's to Junipers, 6,2/3 ... I would suggest that you
first disable Xauth on both sides and get it going. When this 'basic'
connect works, then you can deal with Xauth. There a serveral ways what a
Juniper can do with that logon information btw. we use a Radius server, so
it's easy to go into the wrong path ...

Gruß 
Christian

 > -----Ursprüngliche Nachricht-----
> Von: vpn-help-bounces at lists.shrew.net [mailto:vpn-help-
> bounces at lists.shrew.net] Im Auftrag von kevin vpn
> Gesendet: Samstag, 05. März 2011 05:11
> An: vpn-help at lists.shrew.net
> Betreff: Re: [vpn-help] Problems using shrew to connect to ns5gt
> 
> On Sun, 27 Feb 2011 15:50:11 +0100
> "Thorsten Steffen" <t.steffen at gmx.de> wrote:
> 
> > Hi guys,
> >
> > I'm trying to connect to Juniper NS5GT (Hardware Version: 1010,
> > Firmware Version:6.2.0r2.0 Firewall+VPN) with Shrew VPN Client 2.1.7
> > (running on Win7 64bit) without success.
> >
> > I used http://www.shrew.net/support/wiki/HowtoJuniperSsg to configure
> > both sides.
> >
> ...
> >
> > I think "xauth login FAILED. gw <vpnclient_gateway>, username
> > <thorsten>, retry: 0, timeout: 1" is the relevant message.
> >
> >
> 
> Hi Thorsten,
> 
> You're right that the Juniper logs suggest that the problem is at the
> XAuth authentication step.
> 
> I'd double-check the steps you performed when configuring the user on
> the SSG device (section "Create Local User Accounts" in the HowTo).
> Most especially, check the password you entered.
> _______________________________________________
> vpn-help mailing list
> vpn-help at lists.shrew.net
> http://lists.shrew.net/mailman/listinfo/vpn-help