topic Re: Vista resident VPN client unable to authenticate through ACS in Network Access Control https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614955#M421585 <HTML><HEAD></HEAD><BODY><P>Hi, </P><P></P><P>Can you try it without using MPPE encryption.</P><P></P><P>If it works, then you have to play around with authentication settings(MSCHAP v1 ,MSCHAP v2) on the Conc and on the client.</P><P></P><P>This link would help you :</P><P></P><P><A class="jive-link-custom" href="http://cisco.com/en/US/tech/tk827/tk369/technologies_tech_note09186a0080094310.shtml" target="_blank">http://cisco.com/en/US/tech/tk827/tk369/technologies_tech_note09186a0080094310.shtml</A></P><P></P><P>HTH,</P><P></P><P>-Kanishka</P><P></P><P></P><P></P></BODY></HTML> Wed, 21 Feb 2007 11:52:43 GMT kaachary 2007-02-21T11:52:43Z Vista resident VPN client unable to authenticate through ACS Server https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614950#M421580 <P>We have users attempting to connect to our VPN concentrator externally. It looks like the connection is made and then it is checking for username/password. After that it just does not connection [or authenticate] This points me to the ACS server the Concentrator is using for Radius. The ACS is version 3.3. </P><P></P><P>The ACS is set up to check against windows active directory. IT works fine with XP just not Vista...</P><P></P><P>Any ideas?</P> Sun, 10 Mar 2019 21:59:40 GMT https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614950#M421580 madlm 2019-03-10T21:59:40Z Re: Vista resident VPN client unable to authenticate through ACS https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614951#M421581 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>Do you see any entry in failed attempts for the Vista clients ?</P><P></P><P>Regards,</P><P>Vivek</P></BODY></HTML> Tue, 20 Feb 2007 13:02:55 GMT https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614951#M421581 Vivek Santuka 2007-02-20T13:02:55Z Re: Vista resident VPN client unable to authenticate through ACS https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614952#M421582 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I have the latest vista vpn client and I am able to connect through our VPN connectrator using ACS for authentication with AD. Check the logs on your ACS and try debugging ont he client itself.</P></BODY></HTML> Tue, 20 Feb 2007 19:28:15 GMT https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614952#M421582 efisher 2007-02-20T19:28:15Z Re: Vista resident VPN client unable to authenticate through ACS https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614953#M421583 <HTML><HEAD></HEAD><BODY><P>I am getting an error on the ACS .. 'auth type not supported by External DB' .. </P><P></P><P>I am not using the Cisco client but the VPN client connection built into Vista. </P><P></P><P>Any ideas on the error?</P></BODY></HTML> Wed, 21 Feb 2007 00:27:21 GMT https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614953#M421583 madlm 2007-02-21T00:27:21Z Re: Vista resident VPN client unable to authenticate through ACS https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614954#M421584 <HTML><HEAD></HEAD><BODY><P>The ACS is set to query Active directory first then a linux ldap server IF the ACS cannot determine if they are in the cisco secure database</P></BODY></HTML> Wed, 21 Feb 2007 00:41:09 GMT https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614954#M421584 madlm 2007-02-21T00:41:09Z Re: Vista resident VPN client unable to authenticate through ACS https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614955#M421585 <HTML><HEAD></HEAD><BODY><P>Hi, </P><P></P><P>Can you try it without using MPPE encryption.</P><P></P><P>If it works, then you have to play around with authentication settings(MSCHAP v1 ,MSCHAP v2) on the Conc and on the client.</P><P></P><P>This link would help you :</P><P></P><P><A class="jive-link-custom" href="http://cisco.com/en/US/tech/tk827/tk369/technologies_tech_note09186a0080094310.shtml" target="_blank">http://cisco.com/en/US/tech/tk827/tk369/technologies_tech_note09186a0080094310.shtml</A></P><P></P><P>HTH,</P><P></P><P>-Kanishka</P><P></P><P></P><P></P></BODY></HTML> Wed, 21 Feb 2007 11:52:43 GMT https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614955#M421585 kaachary 2007-02-21T11:52:43Z Re: Vista resident VPN client unable to authenticate through ACS https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614956#M421586 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>Active Directory does not support Chap and LDAP does not support Chap/mschap.</P><P></P><P>Regards,</P><P>Vivek</P></BODY></HTML> Wed, 21 Feb 2007 12:45:39 GMT https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614956#M421586 Vivek Santuka 2007-02-21T12:45:39Z Re: Vista resident VPN client unable to authenticate through ACS https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614957#M421587 <HTML><HEAD></HEAD><BODY><P>AD does support MSCHAP2 yes?</P><P></P><P>There must be other engineers or cases on file in cisco speaking to this issue or at least a best practice configuration to get the connection between the Vista built in client and authentication through the ACS...</P><P></P><P></P></BODY></HTML> Fri, 23 Feb 2007 14:42:05 GMT https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614957#M421587 madlm 2007-02-23T14:42:05Z Re: Vista resident VPN client unable to authenticate through ACS https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614958#M421588 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>AD supports MSchap but not Chap.</P><P></P><P>Regards,</P><P>Vivek</P></BODY></HTML> Fri, 23 Feb 2007 19:37:02 GMT https://community.cisco.com/t5/network-access-control/vista-resident-vpn-client-unable-to-authenticate-through-acs/m-p/614958#M421588 Vivek Santuka 2007-02-23T19:37:02Z