08-01-2010 03:43 AM - edited 02-21-2020 04:46 PM
We have configure remote access VPN and want to setup authentication service through RADIUS protocol. We are using cisco 4.1 ACS server and configure user and group on ACS. Also configure RADIUS related parameter in CISCO asa 5510. But when want to test perticuler user for authentication i got authentication rejection massage .As per analysis of ACS ( faild attempt) ,generated bellow listed log
Authentication protocol is not allowed for this network access profile
We have already implemented 802.1x authentication in our implementation. Might be NAP create a problem .Can any one help me out how to solve this issue.
08-01-2010 05:10 AM
Just to confirm, Is it a local user database ( ACS ) or external user database(say AD)? Can you post the aaa config from your ASA?
08-02-2010 12:59 AM
Hi Rahgovin ,
Please find the configuration which i have configured in ASA
aaa-server vpn protocol radius
aaa-server vpn host 172.16.25.100 key cisco123
tunnel-group testgroup type ipsec-ra
tunnel-group testgroup general-attributes
address-pool testpool
authentication-server-group vpn
tunnel-group testgroup ipsec-attributes
pre-shared-key *
08-02-2010 01:00 AM
I am using ACS internal database for user authentication
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide