VPN3005 and ACS Problem

[mnlatif]

Hi,

When using Cisco ACS as the RADIUS server, the authentication is being failed by the VPN Concentrator with the following message

"Authentication Rejected: Group password is not configured"

Even though the the ACS server send an Access-Accept back to the VPN concentrator but VPN concetrator still rejects the connect attempt.

If I replace the ACS server with a Windows IAS RADIUS server then Authentication is OK.

Is ACS server sending some kind of VSA to the VPN box, which causes the rejection ?

\\ Naman

[didyap]

The message " Authentication Rejected: Group password is not configured" is often seen when you're passing back a group name from the Radius server, and that Radius group doesn't exist on the VPN. Check the Radius attributes on the Radius server for the user you are testing with (and the ACS group that user is in), do you have attribute 25 (Class) checked, and is there a value for it similar to "OU=groupname;"? Also, on ACS make sure the concentrator is being defined as Radius (Cisco VPN 3000).