topic VPN Authentication in Network Access Control

VPN Authentication

todd.kelly — Fri, 21 Feb 2020 18:16:44 GMT

Have a small problem. My authentication server has an ip address of 192.168.105.10 (which I can ping via the concentrator). I can also ping the all interfaces on the concentrator from my pix and router. However, I cannot do a test authentication from the concentrator. I have double checked the group for Remote Users and all looks fine....I guess. I have attached the Filtered Event Log if anyone can help it would be greatly appreciated.

Re: VPN Authentication

amohabir1 — Wed, 06 Sep 2006 17:01:32 GMT

what kind of authentication server is that? Radius, LDAP??

Re: VPN Authentication

todd.kelly — Wed, 06 Sep 2006 17:23:36 GMT

NT Domain

Re: VPN Authentication

ajagadee — Wed, 06 Sep 2006 18:22:07 GMT

Todd,

Based on the below log messages, looks like there is some reachability issue from the VPN3000 to the NT Domain.

31 09/06/2006 10:14:40.120 SEV=4 AUTH/9 RPT=86

Authentication failed: Reason = Network error

handle = 223, server = 192.168.105.10, user = dasjtk

Can you make sure that you ping the NT Domain Server from the VPN3000 and make sure TCP/139 is not blocked.

Also, make sure that you have right NT Domain Server and the server is configured with the default port of TCP/139.

I hope it helps.

Regards,

Arul

Re: VPN Authentication

todd.kelly — Wed, 06 Sep 2006 20:17:50 GMT

Issue was an access-list on my pix to allow access to the domain controller.