I have this set-up
LAN---ROUTER---WWW
I have a new router and tested the IOS VPN server with VPN Client 4.0
with the settings below I was able to establish a
vpn connection using local database
aaa authentication login USERAUTHEN local
aaa authorization network GROUPAUTHOR local
but setting the following
aaa authentication login USERAUTHEN group radius
aaa authorization network GROUPAUTHOR local
I was not able to establish a VPN connection
The Radius is working fine since my PIX is using also XAUTH and was able to connect
I already add the client in my win2k03 IAS server 2600 as a new client with key cisco.
I still cannot connect please help
!
username cisco privilege 15 password 0 cisco
aaa new-model
!
!
aaa authentication login USERAUTHEN local
aaa authorization network GROUPAUTHOR local
aaa session-id common
ip subnet-zero
!
!
!
!
ip audit notify log
ip audit po max-events 100
ip ssh break-string
no ftp-server write-enable
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group VPN_GROUP
key cisco123
dns 210.80.X.210
wins 192.168.1.254
pool IP_POOL
!
!
crypto ipsec transform-set MY_SET esp-3des esp-sha-hmac
!
crypto dynamic-map DYN_MAP 10
set transform-set MY_SET
!
!
crypto map CLIENT_MAP client authentication list USERAUTHEN
crypto map CLIENT_MAP isakmp authorization list GROUPAUTHOR
crypto map CLIENT_MAP client configuration address respond
crypto map CLIENT_MAP 10 ipsec-isakmp dynamic DYN_MAP
!
!
!
!
!
!
!
interface FastEthernet0/0
ip address 192.168.1.100 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.0.47.100 255.255.255.0
duplex auto
speed auto
crypto map CLIENT_MAP
!
ip local pool IP_POOL 192.168.3.1 192.168.3.100
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.1
!
ip http server
ip http authentication local
ip http secure-server
!
!
!
!
radius-server host 192.168.1.254 auth-port 1645 acct-port 1646 key cisco
!
====================
