[vpn-help] VPN not working with Radius and windows 2008

Vipan Kapur v.kapur at ibtimes.com
Wed Feb 27 12:11:18 CST 2013


Hello there!

I hope you can help me, I have setup VPN access using the article
http://www.shrew.net/support/Howto_Juniper_SSG but I cannot connect using
the Radius server.  I can only connect if I create a user account on the
firewall, but I don't want to do that for all the users.

The firewall shows the following:

2013-02-27 13:04:26	info	IKE 198.228.192.58: XAuth login failed for
gateway GW-DIALUP-VPN, username v.kapur, retry: 0, timeout: 0.
2013-02-27 13:04:26	warn	Primary 10.50.100.12, backup1 , and backup2
servers failed.
2013-02-27 13:04:26	warn	Active Server Switchover: New requests for
Microsoft server will try Primary from now on.
2013-02-27 13:04:26	warn	Active Server Switchover: New requests for
Microsoft server will try Backup2 from now on.
2013-02-27 13:04:25	warn	Active Server Switchover: New requests for
Microsoft server will try Backup1 from now on.
2013-02-27 13:04:17	warn	Trying primary server 10.50.100.12.
2013-02-27 13:04:14	info	Rejected an IKE packet on ethernet0/2 from
198.228.192.58:52023 to 209.66.114.182:500 with cookies b39458fbfd5bf598 and
522010f96b92f8d1 because A Phase 2 packet arrived while XAuth was still
pending.
2013-02-27 13:04:14	info	IKE 198.228.192.58 Phase 1: Completed
Aggressive mode negotiations with a 28800-second lifetime.
2013-02-27 13:04:14	info	IKE 198.228.192.58 Phase 1: Completed for
user client.corporate.com.
2013-02-27 13:04:14	info	IKE 198.228.192.58 phase 1:The symmetric
crypto key has been generated successfully.
2013-02-27 13:04:14	info	IKE 198.228.192.58 Phase 1: Responder starts
AGGRESSIVE mode negotiations.

The IKE logs are attached as well as the error on the shrew soft client.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: shrew.txt
URL: <http://lists.shrew.net/pipermail/vpn-help/attachments/20130227/3b4a87fa/attachment.txt>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ike service.txt
URL: <http://lists.shrew.net/pipermail/vpn-help/attachments/20130227/3b4a87fa/attachment-0001.txt>


More information about the vpn-help mailing list