[vpn-help] VPN not working with Radius and windows 2008
Vipan Kapur
v.kapur at ibtimes.com
Wed Feb 27 12:11:18 CST 2013
Hello there!
I hope you can help me, I have setup VPN access using the article
http://www.shrew.net/support/Howto_Juniper_SSG but I cannot connect using
the Radius server. I can only connect if I create a user account on the
firewall, but I don't want to do that for all the users.
The firewall shows the following:
2013-02-27 13:04:26 info IKE 198.228.192.58: XAuth login failed for
gateway GW-DIALUP-VPN, username v.kapur, retry: 0, timeout: 0.
2013-02-27 13:04:26 warn Primary 10.50.100.12, backup1 , and backup2
servers failed.
2013-02-27 13:04:26 warn Active Server Switchover: New requests for
Microsoft server will try Primary from now on.
2013-02-27 13:04:26 warn Active Server Switchover: New requests for
Microsoft server will try Backup2 from now on.
2013-02-27 13:04:25 warn Active Server Switchover: New requests for
Microsoft server will try Backup1 from now on.
2013-02-27 13:04:17 warn Trying primary server 10.50.100.12.
2013-02-27 13:04:14 info Rejected an IKE packet on ethernet0/2 from
198.228.192.58:52023 to 209.66.114.182:500 with cookies b39458fbfd5bf598 and
522010f96b92f8d1 because A Phase 2 packet arrived while XAuth was still
pending.
2013-02-27 13:04:14 info IKE 198.228.192.58 Phase 1: Completed
Aggressive mode negotiations with a 28800-second lifetime.
2013-02-27 13:04:14 info IKE 198.228.192.58 Phase 1: Completed for
user client.corporate.com.
2013-02-27 13:04:14 info IKE 198.228.192.58 phase 1:The symmetric
crypto key has been generated successfully.
2013-02-27 13:04:14 info IKE 198.228.192.58 Phase 1: Responder starts
AGGRESSIVE mode negotiations.
The IKE logs are attached as well as the error on the shrew soft client.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: shrew.txt
URL: <http://lists.shrew.net/pipermail/vpn-help/attachments/20130227/3b4a87fa/attachment.txt>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ike service.txt
URL: <http://lists.shrew.net/pipermail/vpn-help/attachments/20130227/3b4a87fa/attachment-0001.txt>
More information about the vpn-help
mailing list