[vpn-help] VPN not working with Radius and windows 2008

[Kevin VPN]

On 02/27/2013 01:11 PM, Vipan Kapur wrote:
> Hello there!
>
> I hope you can help me, I have setup VPN access using the article
> http://www.shrew.net/support/Howto_Juniper_SSG but I cannot connect using
> the Radius server.  I can only connect if I create a user account on the
> firewall, but I don't want to do that for all the users.
>
> The firewall shows the following:
>
> 2013-02-27 13:04:26	info	IKE 198.228.192.58: XAuth login failed for
> gateway GW-DIALUP-VPN, username v.kapur, retry: 0, timeout: 0.
> 2013-02-27 13:04:26	warn	Primary 10.50.100.12, backup1 , and backup2
> servers failed.
> 2013-02-27 13:04:26	warn	Active Server Switchover: New requests for
> Microsoft server will try Primary from now on.
> 2013-02-27 13:04:26	warn	Active Server Switchover: New requests for
> Microsoft server will try Backup2 from now on.
> 2013-02-27 13:04:25	warn	Active Server Switchover: New requests for
> Microsoft server will try Backup1 from now on.
> 2013-02-27 13:04:17	warn	Trying primary server 10.50.100.12.

Hi Vipan,

These messages look to me like your Juniper is unable to contact the 
RADIUS server.  I'm assuming "Microsoft server" is your Windows 2008 
RADIUS server.

If your device is unable to communicate with the RADIUS server, it 
obviously would be unable to verify credentials that come from that server.