cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2233
Views
0
Helpful
1
Replies

Concerned - Win2K to PIX tunnel is up without authentication

HEATH FREEL
Level 1
Level 1

I successfully built a Gateway Tunnel between a Win2K machine to a PIX Ver6.1.1

Sounds great except that my PIX is configured to authenticate to my RADIUS server and the Win2K box was not asked for authentication. This concerns me...

I have a number of Tunnels built on this PIX - some are peer to peer where I set:

isakmp key ** address X.X.X.X ~~~ no-xauth no-config

Others are for Clients:

isakmp key ** address 0.0.0.0

and I leave out the no-xauth, and all clients have to authenticate and this works all the time.

But for some reason this Win2K machine that is set up as a gateway is using the key associated with an unknown address - but is not authenticating.

Could this be a bug, a feature, or maybe an oversight.

1 Reply 1

HEATH FREEL
Level 1
Level 1

I just configured a PIX to PIX tunnel and was able to accomplish the same thing. Xauth is being bypassed. This is concerning me...