SSL VPN Authentication using Radius

[Marcin Zgola]

I am running ASA version 8.4(1), and anyconnect version 3.0.1047. My SSL VPN works fine, but i run into an issue with one user . his account did not work , and everytime users logged in it got this message "VPN Server could not parse request".

I found the problem after getting a user information meaning his username and password. His password had "&" as one of the special characters. when we change it to something that does not have that , it works just fine.

We are using microsoft NPS server as radius. but when i run a test within CLI it works just fine, only when anyconnect asks to authenticate it fails.

Anyone had the similar problem?

Thanks

[Marcin Latosiewicz · Accepted solution]

Marcin,

This could a re-occurance of:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk14036

Would you be able to test the workaround?

Marcin

EDIT

Looks like this one:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtn75204

[Marcin Zgola]

Thank you sir.

I should've looked at the bug tool, but it just not enough time...

Thanks again..

[yurezplace]

Can you copy the content from BugToolKit so other users can get the correct answer?
We have the same problem for some users at my job.

Thanks

[Marcin Latosiewicz]

Anton,

Here you go,

M.

CSCtn75204  AnyConnect 3.0 VPN Server could not parse request with & or < in passwd
Symptom:

AnyConnect 3.0 client reports "VPN Server could not parse request" error during user authentication.  

Conditions:

Issue is observed when user password includes a "&" or "<" character.

Workaround:

Utilize a password that does not include these special characters.


Fixed in 3.0.2035

[yurezplace]

Thanks. Our customer used a "&" character in his password, but it works now after he changed his password!