Help PIX and freeradius

cyakpovi — Sun, 10 Mar 2019 21:36:35 GMT

I have a problem with my configuration. can someone help.

I have a freeradius, pix and vpn client and i install the radius to authenticate the vpn users. i tested the authentication from the pix to the radius OK but if I want the vpn user to authenticate, after doing tcpdump on the radius server I can see the request coming from the pix but the request cannot go back to the pix. can someone help.

NB: I can authenticate the ssh connection but not the vpn.

thanks

-------------

carrel

---------------------- part of the configuration concerning my pb -------------

aaa-server RADIUS protocol radius

aaa-server RADIUS host 192.168.1.40

retry-interval 2

timeout 2

key vpn

authentication-port 1812

accounting-port 1813

aaa authentication ssh console RADIUS

sysopt connection permit-ipsec

crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac

crypto dynamic-map vpn 20 set transform-set ESP-AES-256-SHA

crypto map outside_map 65535 ipsec-isakmp dynamic vpn

crypto map outside_map interface outside

crypto map outside_map client authentication RADIUS

isakmp enable outside

isakmp policy 20 authentication pre-share

isakmp policy 20 encryption aes-256

isakmp policy 20 hash sha

isakmp policy 20 group 2

isakmp policy 20 lifetime 86400

ip local pool staffpool 10.33.11.1-10.33.11.254

vpngroup groupstaff address-pool staffpool

vpngroup groupstaff password **********

----------------------------------

the log is attached

topic Help PIX and freeradius in Network Access Control

Help PIX and freeradius

Re: Help PIX and freeradius