cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1340
Views
0
Helpful
3
Replies

Remote access VPN authentication error

nits_1977
Level 1
Level 1

We have configure remote access VPN and want to setup authentication service through RADIUS protocol. We are using cisco 4.1 ACS server and configure user and group on ACS.  Also configure RADIUS related parameter in CISCO asa 5510. But when want to test perticuler user for authentication i got authentication rejection massage .As per analysis of ACS ( faild attempt) ,generated bellow listed log

Authentication protocol is not allowed for this network access profile

We have already implemented 802.1x authentication in our implementation. Might be NAP create a problem .Can any one help me out how to solve this issue.

3 Replies 3

rahgovin
Level 4
Level 4

Just to confirm, Is it a local user database ( ACS ) or external user database(say AD)? Can you post the aaa config from your ASA?

Hi Rahgovin ,

    Please find the configuration which i have configured in ASA

aaa-server vpn protocol radius
aaa-server vpn host 172.16.25.100 key cisco123

tunnel-group testgroup type ipsec-ra
tunnel-group testgroup general-attributes
address-pool testpool
authentication-server-group vpn

tunnel-group testgroup ipsec-attributes
pre-shared-key *

I am using ACS internal database for user authentication