cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2094
Views
0
Helpful
1
Replies

VPN 3030 concentrator fail to authenticate client if NT domain is set

rman
Level 1
Level 1

I'm using VPN 3030 Concentrator and Cisco ACS 2.6 NT as radius server.

I found that the CiscoSecure cannot authenticate Win98/ME VPN clients if the WindowsNT domain name is entered on the clients PC. The following error message was appeared on the client PC:

'Error 691. The computer U have dialed in to has denied access because the username and/or the password is invalid in the domain'

I checked the log on CiscoSecure and found that the login name is in the form "domain/username". The CiscoSecure reject the user with reason "CS unknow user".

What can I solve the problems ? Such as how to truncate the domain? or any VPN Concentrator software upgrade to do so ?

Thanks

Rayon

1 Reply 1

cjacinto
Cisco Employee
Cisco Employee

You could use the strip realm option on the group setting under the General tab on the 3000.

See:

http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3000/3_1/config/usermgt.htm#xtocid75878